Senior Crypto Threat Intelligence & Incident Response Lead

Lever, Inc.; España; A distancia; EUR 80.000 - 120.000; Jornada completa

Descripción de la vacante

Lever, Inc. is seeking a Senior Threat Intelligence Analyst based in Spain to lead the response to major cryptocurrency hacks, focusing on blockchain tracing, incident handling, and AI-enhanced analysis.

You will coordinate cross‑functional teams across time zones and manage contractor resources during critical incidents. The role emphasizes ownership of investigations, rapid customer communications, and publishing technical research on significant exploits, with opportunities to influence

Formación

• 5+ years of blockchain intelligence or cyber threat analytics experience.
• Experience owning high-stakes incident response and reporting under pressure.
• Strong blockchain tracing across Bitcoin, EVM, TRON, Solana ecosystems.

Responsabilidades

• Lead response to major hacks and coordinate triage, investigations, and post-incident reporting.
• Ensure hacks are identified and communicated to customers within hours of public reporting.
• Maintain comprehensive hack intelligence including addresses, dates, amounts and attack types.
• Collaborate with Data Science and Engineering to track stolen funds across chains and services.
• Develop AI-assisted tools and workflows to automate parts of hack analysis and response.
• Conduct root-cause analysis of exploits and publish technical research.

Conocimientos

Blockchain tracing

Incident response

AI in analytics

Communication skills

Team leadership

Solidity reverse engineering

Contractor management

Threat intelligence

Descripción del empleo

Lever, Inc. is seeking a Senior Threat Intelligence Analyst based in Spain to lead the response to major cryptocurrency hacks, focusing on blockchain tracing, incident handling, and AI-enhanced analysis.

You will coordinate cross‑functional teams across time zones and manage contractor resources during critical incidents. The role emphasizes ownership of investigations, rapid customer communications, and publishing technical research on significant exploits, with opportunities to influence