SOC Analyst for Web3 infrastructure

Consensys Incorporated builds and operates institutional-grade blockchain infrastructure connecting financial institutions to digital asset networks. It focuses on privacy, scalability, resilience, security, and regulatory readiness.

• Architect and maintain centralized log collection, SIEM integration, and incident response services across AWS and corporate IT services
• Develop detection rules and alert logic for unauthorized access, privilege escalation, credential compromise, and anomalous user activity
• Ensure security logging visibility, audit readiness, and access control management across corporate platforms
• Establish real-time security monitoring for Linea mainnet and the open-source Lineth ZK rollup stack
• Monitor RPC endpoints, sequencer performance, L1/L2 messaging reliability, state root finalization, and infrastructure telemetry
• Collaborate with DevOps and core engineering teams to detect and mitigate infrastructure threats, DDoS attacks, and zero-day vulnerabilities
• Implement and tune real-time Web3 threat monitoring platforms
• Build automated alerts for suspicious smart contract interactions, flash loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge activity on Linea mainnet
• Perform onchain forensics and transaction trace analysis to safeguard ecosystem DeFi protocols and institutional assets
• Respond to security alerts from IT SaaS, cloud infrastructure, and Web3 protocol layers, using Grafana Cloud IRM to manage on-call rotations and incidents
• Lead triage, investigation, containment, and post-mortem root cause analysis for confirmed security incidents
• Conduct proactive threat hunting across system logs, cloud environments, and onchain transaction streams
• Automate incident response playbooks and triage workflows using SOAR tools and custom scripts
• Refine detection rules to reduce false positives and improve MTTD and MTTR
• Integrate automated containment mechanisms across access management, cloud IAM, and Web3 security providers
• Maintain incident records, forensic evidence, and documentation aligned with SOC2 and ISO compliance frameworks
• Prepare security operational metrics, alert volume analysis, and threat reports for leadership
• Ensure compliance with corporate security policies and access controls across all environments
• Monitor Web3 threat landscapes, tracking emerging smart contract exploit techniques and threat actors targeting L2 ecosystems
• Coordinate with external security researchers, bug bounty programs, and Web3 security alliances to share intelligence
• Participate in incident response drills, security reviews, and audit remediation with external security partners

• 3–5+ Years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 environments
• Hands-on experience configuring and maintaining monitoring, threat detection, and incident analysis services for AWS and enterprise IT platforms
• Direct experience using Web3 security and onchain monitoring tools such as Hypernative, Hexagate, and Blockaid
• Deep technical understanding of Ethereum, L2 scaling architectures, ZK-rollups, and smart contract vulnerabilities
• Proficiency in log management, monitoring platforms, SIEM/SOAR platforms, and scripting languages such as Python, Go, Bash, or SQL
• Familiarity with SOC2, ISO 27001, NIST, or SANS security frameworks
• Strong communication, problem-solving, and analytical skills

• Competitive compensation package, including salary, benefits, and performance-based incentives
• Meaningful equity
• Opportunity to work on open-source software
• Founding member of the incident response team, working closely with the DevOps team, Head of Security, and Site Reliability Engineer