Senior Threat Intelligence Analyst, Hacks

Lever, Inc.; France; À distance; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Autonomy

Distributed-first work model

Cross‑functional collaboration across

Résumé du poste

Lever, Inc. is seeking a Senior Threat Intelligence Analyst to lead the intelligence function focused on cryptocurrency hacks and security incidents in France.

You will own end-to-end response, from detection to attribution and reporting, combining blockchain intelligence, incident response, and applied AI. You’ll guide a contractor team across time zones and ensure rapid customer communications during critical incidents.

Qualifications

• 5+ years of blockchain intelligence, investigations, or related
• Experience owning high-stakes incident response and reporting under pressure
• Strong blockchain tracing across Bitcoin, EVM chains, TRON, Solana
• Knowledge of DeFi exploits and attacker behavior
• Experience applying AI to analytical workflows with human oversight
• Experience leading a small team or contractors
• Excellent written and verbal communication for technical and executive briefs
• Hands-on ownership mindset beyond coordination
• Familiarity with Solidity is a plus
• Experience in security auditor or blockchain analytics environments is advantageous
• Experience tracking specific hacker groups is a plus

Responsabilités

• Lead response to major cryptocurrency hacks, coordinating triage and investigations
• Ensure hacks are identified and communicated to customers within hours of reporting
• Maintain comprehensive hack intelligence including addresses, dates, amounts, and types
• Design and improve tracking of stolen funds across chains with Data Science/Engineering
• Develop AI-assisted tools and workflows for hack analysis while ensuring oversight
• Conduct root-cause analysis of significant exploits and publish technical research
• Identify vulnerable contracts and threats and share insights to products
• Manage contractors and coordinate multi-time-zone rhythms and incident war rooms
• Collaborate with cyber threat intelligence, investigations, data science, engineering and communications teams

Connaissances

Blockchain tracing

Cyber threat intel

Incident response

AI in analytics

Contractor management

Communication skills

Hands-on analysis

Solidity familiarity

Security analytics experience

Team leadership

Description du poste

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Threat Intelligence Analyst, Hacks based in France.

As a Senior Threat Intelligence Analyst, you will lead the intelligence function focused on cryptocurrency hacks and security incidents. You will own the end-to-end response to major hacks, from initial detection and investigation through attribution and reporting. The role combines blockchain intelligence, cyber threat analysis, incident response, and applied AI. You will work closely with data science and engineering teams to improve automated tracing and investigative workflows. You will also coordinate a small contractor team operating across time zones and support rapid customer communications during critical incidents. This is a high-ownership role in a fast-moving environment where your analysis can directly support efforts to disrupt illicit activity.

Accountabilities

• Lead the response to major cryptocurrency hacks, coordinating triage, investigations, internal stakeholders, customer communications, and post-incident reporting.
• Ensure significant hacks are identified, investigated, and made visible to customers within hours of credible public reporting, including through around-the-clock coverage.
• Maintain complete and accurate hack intelligence, including affected entities, theft addresses, dates, stolen amounts, and attack types.
• Design and improve systems with Data Science and Engineering teams to track and attribute stolen funds as they move across blockchains and services.
• Develop AI-assisted tools, agents, and workflows that automate parts of hack analysis and incident response while maintaining rigorous human quality control.
• Conduct root-cause analysis of significant exploits and produce detailed technical research and publications.
• Develop methods to identify vulnerable contracts and potential threats before exploitation and contribute those insights to relevant products.
• Manage contractors and coordinate operating rhythms across teams and time zones, including weekly team syncs, monthly metrics reviews, and incident war rooms.
• Collaborate with teams covering cyber threat intelligence, nation-state activity, investigations, data science, engineering, and communications.

Requirements:

• 5+ years of professional experience in blockchain intelligence, cryptocurrency investigations, cyber threat intelligence, incident response, or a closely related discipline.
• Demonstrated experience owning high-stakes incident response, including war rooms, investigation leadership, incident reporting, and communications under pressure.
• Strong blockchain tracing capabilities across major networks such as Bitcoin, EVM-compatible chains, TRON, and Solana, including experience with bridges, cross-chain swaps, and mixers.
• Strong understanding of DeFi, bridge, and cryptocurrency exchange exploits, as well as attacker behavior following the theft of funds.
• Practical experience applying AI to analytical workflows, including building or using AI-assisted and agentic systems, validating outputs, identifying failure modes, and applying appropriate human oversight.
• Experience managing contractors or leading a small team in a fast-moving operational environment.
• Excellent written and verbal communication skills, with the ability to produce both technical investigations and concise executive-level briefings.
• Highly hands-on and accountable, with a willingness to take ownership of complex analytical work rather than focusing solely on coordination.
• Familiarity with smart-contract reverse engineering, particularly Solidity, is a plus.
• Experience working at a security auditor, blockchain analytics organization, or similar intelligence-focused environment is advantageous.
• Experience tracking or investigating activity associated with specific, well-known hacker groups is also a plus.

Benefits:

• Opportunity to work on complex problems at the intersection of AI, blockchain intelligence, cybersecurity, and crime prevention.
• High-ownership environment with significant autonomy over investigative approaches, systems, and operational processes.
• Collaboration with multidisciplinary teams across intelligence, investigations, data science, engineering, and communications.
• Distributed-first working environment with collaboration across multiple international time zones.
• Exposure to advanced AI-driven analytical workflows and opportunities to build new investigative tools and automation.
• Opportunity to contribute to technical research and publications with broad industry relevance.
• Fast-paced environment focused on experimentation, rapid iteration, and measurable impact.
• Support for professional growth through challenging, mission-driven work and continuous feedback.
• Additional compensation, healthcare, flexibility, and other benefits may vary based on location and employment terms.