Principal Security Engineer — Detection & Response (Blockchain/AI)

Circle; Minneapolis, Saint Paul (MN, MN); On-site; USD 128,000 - 197,000; Full time

Job summary

Circle is seeking a Principal Security Engineer to lead detection and response initiatives across blockchain, cloud, and AI surfaces. You will own incident response programs, drive detections as code, and collaborate with engineering, security, and product teams.

The role includes on-call duties during business hours and occasional nights/weekends. The ideal candidate has extensive AWS security experience, blockchain defense background, and strong skills in SIEM, SOAR, and AI tooling

Qualifications

• 10+ years in detection, response, or security engineering.
• 3+ years leading security incidents involving engineering teams.
• Strong AWS security knowledge: IAM, KMS, EKS, CSPM tooling.
• Experience with blockchain/crypto threats and on-chain monitoring.
• Hands-on with AI tooling to accelerate work and defend against shadow AI.

Responsibilities

• Lead security projects across Circle's threat surfaces (blockchain, cloud, AI).
• Develop detection coverage for cloud-native and blockchain threats.
• Coordinate incident response with multiple teams and on-call duties.
• Advance SIEM and SOAR detections; maintain core tooling and governance.
• Provide security guidance and support threat modeling, audits, and tooling initiatives.

Skills

Security engineering

Incident response

AWS security

Blockchain security

AI security tooling

SIEM/SOAR

Python

Golang

Detections as Code

Cross-team collaboration

Tools

Panther

Tines

Job description

Circle is seeking a Principal Security Engineer to lead detection and response initiatives across blockchain, cloud, and AI surfaces. You will own incident response programs, drive detections as code, and collaborate with engineering, security, and product teams.

The role includes on-call duties during business hours and occasional nights/weekends. The ideal candidate has extensive AWS security experience, blockchain defense background, and strong skills in SIEM, SOAR, and AI tooling