Principal Security Engineer, Detection & Response

What you'll do

• Build detection and response capabilities for blockchain and crypto-native threats like smart contract exploitation and wallet abuse.
• Develop security coverage for cloud-native infrastructure including AWS, EKS, and identity federation systems.
• Identify and mitigate AI-specific risks such as shadow AI adoption and unauthorized tool integrations.
• Integrate AI tools into SOC functions to accelerate detection triage and analyst workflows.
• Manage and maintain core security infrastructure including SIEM and orchestration platforms.
• Lead incident response efforts and collaborate across teams to investigate and resolve high-stakes threats.
• Identify infrastructure gaps and work with business partners to improve logging and visibility.
• Perform on-call duties to support security operations during standard and occasional off-hours incidents.

What we're looking for

• 10+ years of experience in detection, response, or security engineering.
• 3+ years of experience commanding security incidents, especially those involving engineering.
• Deep cloud security knowledge in AWS environments including IAM, KMS, EKS, and CSPM tooling.
• Working knowledge of blockchain and crypto-native threats; direct experience defending blockchain, custody, or DeFi infrastructure (preferred).
• Hands-on experience using AI tooling to accelerate work and address risks like shadow AI and agentic workflows.
• Extensive knowledge of SIEM, Case Management, and SOAR solutions such as Panther or Tines.
• Programming experience in Python, Golang, or similar languages and experience building Detections As Code.
• Knowledge of macOS operating systems, file systems, and memory; exposure to GCP or OCI (preferred).