Remote Security Incident Response Engineer

Chainlink; United States; Remote; USD 160,000 - 260,000; Full time

Job summary

Chainlink Labs is seeking a Security Response Engineer to own the full incident response lifecycle. You will serve as incident commander during high-severity events and coordinate across teams in a remote, international setup.

You will build detections, playbooks, and automation to improve response readiness, expand tooling, and drive faster recovery while communicating clearly to both technical and non-technical stakeholders.

Qualifications

• Primary incident commander for high-severity security incidents.
• Experience triage, containment, remediation across endpoints, cloud and networks.
• Extensive macOS environment experience.

Responsibilities

• Own and coordinate full incident response lifecycle.
• Lead on-call rotation and incident communications.
• Develop detections and automate response actions.
• Improve tooling and visibility across teams.

Skills

Incident response leadership

Triage and containment

macOS endpoint

Communication

Detections

Python

Go

Rust

Tools

Sigma detections

Endpoint telemetry

Automation scripts

Job description

Chainlink Labs is seeking a Security Response Engineer to own the full incident response lifecycle. You will serve as incident commander during high-severity events and coordinate across teams in a remote, international setup.

You will build detections, playbooks, and automation to improve response readiness, expand tooling, and drive faster recovery while communicating clearly to both technical and non-technical stakeholders.