Principal SOC Analyst

Hard Yaka; United States; Remote; USD 155,000 - 186,000; Full time

Job summary

Join a pioneering firm at the forefront of the blockchain revolution! This role is perfect for security enthusiasts eager to bridge traditional cybersecurity with innovative web3 technologies. As a key member of the Security Operations Center, you'll develop processes and playbooks that enhance security across diverse environments. Your expertise will be crucial in addressing complex security incidents and mentoring team members on best practices. With a commitment to continuous learning and a flexible remote-first culture, this opportunity offers a dynamic work environment where your contributions will shape the future of decentralized technologies. Embrace the challenge and make a difference in the rapidly evolving web3 space!

Benefits

Equity

Continuous learning opportunities

Unlimited vacation/holidays

Flexible working arrangements

Remote-first work environment

Qualifications

• 6+ years in IT Security, with SOC experience in web2 and web3.
• Deep understanding of incident response and security tools.

Responsibilities

• Monitor and analyze data from networks and blockchain.
• Investigate security incidents across web2 and web3 environments.

Skills

IT Security

Incident Response

Vulnerability Management

Malware Analysis

Threat Intelligence

Problem Solving

Scripting (Python/Bash/Go)

Communication Skills

Education

Technological degree in Computer Science or Cybersecurity

Certifications from information security bodies

Tools

SIEM

IDS/IPS

Cloud Security Systems

Blockchain Forensics Tools

Job description

US or Remote (non-EU* and non-Australia)

Consensys is the leading blockchain and web3 software company founded by Joe Lubin, CEO of Consensys and Co-Founder of Ethereum. Since 2014, Consensys has been at the forefront of innovation, pioneering technological developments within the web3 ecosystem.

Through our product suite, including the MetaMask platform, Infura, Linea, Diligence, and our NFT toolkit Phosphor, we have become the trusted collaborator for users, creators, and developers on their path to build and belong in the world they want to see.

Whether building a dapp, an NFT collection, a portfolio, or a better future, the instinct to build is universal. Consensys inspires and champions the builder instinct in everyone by making web3 universally easy to use and develop on.

About the role:

As a key member of our SOC, you'll drive security objectives and improvements across both web2 and web3 environments. You'll set standards for our Analyst Team, developing processes and playbooks for a world-class Security Operation that spans traditional and blockchain-based technologies. Your expertise will be crucial in addressing complex security incidents, providing insights, and driving continuous improvement. With a passion for security, you'll stay current on emerging trends in both domains, analyze new threats, and lead investigations into exciting incidents. This role bridges conventional cybersecurity with web3, ensuring comprehensive protection across our entire technological landscape.

Responsibilities will include:

• Monitor and analyze real-time data from traditional networks, blockchain networks, and web applications.
• Investigate security incidents and vulnerabilities across web2 and web3 environments.
• Utilize and interpret results from various security tools, including SIEM, IDS/IPS, cloud security systems, and blockchain-specific platforms.
• Develop and implement incident response procedures for both traditional and blockchain-related security issues.
• Create automation scripts to enhance efficiency in detecting and responding to security threats in all environments.
• Design and maintain comprehensive incident response playbooks covering both web2 and web3 ecosystems.
• Stay updated on emerging cybersecurity trends, including traditional threats and crypto/blockchain-specific vulnerabilities.
• Assess and mitigate risks in both traditional IT infrastructure and web3 systems, including smart contracts and DeFi protocols.
• Integrate multiple data streams from networks, applications, and blockchain sources into near real-time security dashboards.
• Mentor team members on security best practices spanning both web2 and web3 technologies.
• Produce technical advisories on various cybersecurity issues for internal teams and partners.
• Participate in 24/7 on-call rotation for urgent security incidents across all platforms.
• Develop cross-platform security strategies that address both traditional and blockchain-based threats.
• Manage and optimize SIEM deployments, including writing and tuning queries in relevant languages, integrating diverse logging sources, and efficiently managing data retention and analysis to enhance threat detection and response capabilities across both web2 and web3 environments.

Qualifications:

• 6+ years of experience in IT Security, specifically in a SOC environment, with exposure to both traditional and blockchain-based systems.
• Deep understanding of incident response best practices and processes across web2 and web3 environments.
• Experience with security tools for detection, diagnosis, containment, and remediation in both traditional and blockchain networks.
• Familiarity with defense methods and techniques applicable to both conventional and crypto-asset protection.
• Strong awareness of the cybersecurity landscape, including traditional threats and blockchain-specific vulnerabilities, with competence in malware analysis, root cause analysis, threat intelligence, SOAR, and EDR.
• In-depth knowledge of managing security in cloud and decentralized environments, including vulnerability management, protective monitoring, and incident management.
• Working knowledge of security compliance, assurance, risk management, business continuity, data protection, and main security standards (ISO2700x, CIS, NIST, SOC2), including emerging standards for blockchain security.
• Highly developed, process-oriented skills for troubleshooting and problem-solving across diverse technological environments.
• Experience with containerized environments, microservices, and their security implications, including container security and secrets management (Docker/Kubernetes/AKS).
• Scripting experience in Python/Bash/Go or equivalent, with the ability to analyze and interact with smart contracts.
• Understanding of blockchain technologies, consensus mechanisms, and common vulnerabilities in smart contracts and DeFi protocols.
• Excellent verbal and written English skills, with the ability to communicate complex security concepts to both technical and non-technical audiences.

Nice to have:

• Experience managing security in multi-cloud and decentralized environments.
• Qualifications and certifications from information security bodies such as GIAC, ISC2, ISACA, ISA, CompTIA, or blockchain-specific certifications.
• Technological degree in Computer Science, Cybersecurity, or equivalent.
• Experience with blockchain forensics tools and techniques.
• Knowledge of cryptography and its applications in both traditional and blockchain systems.
• Familiarity with regulatory frameworks affecting both traditional finance and crypto assets.
• Contributions to open-source security projects or blockchain protocols.
• Experience in auditing smart contracts or conducting security assessments of DeFi protocols.

Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter.

It is a requirement of employment in this position that applicants will be required to submit to background checks including but not limited to employment, education and criminal record checks. Further details will be provided to applicants that successfully meet the criteria for the position as determined by the company in its sole discretion.

The salary range for US-based candidates only will be determined throughout the interview process depending on experience and skills.

US pay range (not including bonus, equity or other benefits):

$155,000 — $186,000 USD

In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At Consensys, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities with economic and political agency through decentralized technologies. We welcome the range of perspectives and differences and celebrate them.

Consensys is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law.

We have a comprehensive and competitive benefits package to make sure we’re looking after you and what matters most.

Equity: We believe in ownership and want everyone to have a stake in our future success, that’s why you’ll receive equity when you join us.

Recognized in the blockchain and Web3 ecosystem: Working at Consensys is a tremendous reference for your career. You’ll join a network of entrepreneurs and technologists that extends across the global crypto ecosystem.

Continuous learning & opportunities: We provide growth and development opportunities through the Consensys Advance Program, including full access to Coursera & comprehensive learning modules and programs.

Unlimited vacation/holidays: We value downtime to recharge and reset, ensuring everyone at ConsenSys has work/life balance.

Flexible working arrangements: With our global workforce we have fine-tuned asynchronous working which means we have a lot of flexibility in the structure of when we work and how we work together.

Remote first: You’ll be joining a team based all over the world. Providing the unique opportunity to work with people from across 6 continents.