Principal Security Engineer, Detection & Response
Core
Lead detection and response capabilities across blockchain/custody, cloud-native (AWS/EKS), and AI tooling surfaces to protect financial infrastructure and respond to security incidents.
Role type
Principal Security Engineer (Detection & Response)
Builds
Detection coverage, response playbooks, and SOC tooling (SIEM, SOAR, orchestration) for blockchain, cloud, and AI environments.
Domain
Cybersecurity, Blockchain/Crypto, Cloud Security, AI Security
Required skills
Security incident command, AWS cloud security (IAM, EKS, CSPM), blockchain/custody threat defense, AI security risks (shadow AI, agentic workflows), SIEM/SOAR/Case Management, Python/Golang, Detections As Code, macOS internals
Preferred skills
GCP/OCI exposure, DeFi infrastructure defense, AI tooling usage
Technologies
AWS, EKS, Wiz, Panther, Tines, Python, Golang, macOS, SIEM, SOAR
Responsibilities
Proactively identify and respond to emerging security threats across cloud, endpoint, blockchain, and AI surfaces; Build detection and response capability for blockchain and crypto-native threats; Develop detection coverage for cloud-native attacks across AWS + EKS; Extend detection for AI-specific risks; Lead and respond to incidents and collaborate across teams to investigate and resolve; Develop detection techniques to identify anomalous behaviors and attacks across the environment; Provide security guidance to various organizations throughout the company; Support broader security team projects such as threat modeling, vulnerability scanning, audits, and custom tool building; Take on-call shifts (every 3rd week and occasional weekend).
Seniority
Principal, hands-on IC with strategic leadership
