SOC Analyst

Consensys • New York, NY

4d • Remote

About The Position

Consensys Incorporated is an independent blockchain infrastructure company building and operating neutral, institutional-grade infrastructure connecting financial institutions to digital asset networks. The SOC Analyst will join the security organization as the founding member of the incident response team, architecting, building, and operating a comprehensive 24/7 monitoring and alerting ecosystem across enterprise IT SaaS, cloud infrastructure, Linea mainnet, the Lineth ZK-rollup stack, and Web3 smart contract environments.

The role covers security monitoring and response for corporate platforms including JumpCloud, AWS, Google Workspace, GitHub, Notion, and Zoom; infrastructure components including Besu, Maru, coordinators, and provers; and ecosystem DeFi protocols. The analyst will build detections, investigate and respond to incidents, conduct threat hunting and onchain forensics, automate response workflows, and maintain compliance documentation and operational reporting. This is a fully remote role at a globally distributed, remote-first company.

Requirements

• 3–5+ years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 environments.
• Hands-on experience configuring and maintaining monitoring, threat detection, and incident analysis services for AWS, including Amazon GuardDuty and AWS CloudTrail, and enterprise IT platforms including JumpCloud, Google Workspace, GitHub, Notion, and Zoom.
• Direct experience with Web3 security and onchain monitoring tools such as Hypernative, Hexagate, and Blockaid.
• Deep technical understanding of Ethereum, L2 scaling architectures, ZK rollups, the Lineth stack, Besu execution, prover systems, and smart contract vulnerabilities.
• Proficiency in log management, monitoring platforms such as Grafana, SIEM/SOAR platforms, and scripting languages such as Python, Go, Bash, or SQL.
• Familiarity with SOC 2, ISO 27001, NIST, or SANS security frameworks.
• Strong communication, problem-solving, and analytical skills in a fast-paced, remote-first environment.

Responsibilities

• Architect and maintain centralized log collection, SIEM integration, and incident response services across AWS and corporate IT services.
• Develop detection rules and alert logic for unauthorized access, privilege escalation, credential compromise, and anomalous user activity.
• Ensure security logging visibility, audit readiness, and access control management across corporate platforms.
• Establish real-time security monitoring for Linea mainnet and the Lineth ZK-rollup stack, including its execution, consensus, coordinator, and prover components.
• Monitor RPC endpoints, sequencer performance, L1/L2 messaging reliability, state-root finalization, and infrastructure telemetry.
• Collaborate with DevOps and core engineering teams to detect and mitigate infrastructure threats, DDoS attacks, and zero-day vulnerabilities.
• Implement and tune Web3 threat monitoring platforms, including Hypernative, Hexagate, and Blockaid.
• Build automated alerts for suspicious smart contract interactions, flash-loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge activity.
• Perform onchain forensics and transaction trace analysis to safeguard DeFi protocols and institutional assets.
• Respond to alerts from IT SaaS, cloud infrastructure, and Web3 protocol layers, using Grafana Cloud IRM for on-call rotations and incident management.
• Lead incident triage, investigation, containment, and post-mortem root-cause analysis.
• Conduct proactive threat hunting across system logs, cloud environments, and onchain transaction streams.
• Automate incident response playbooks and triage workflows using SOAR tools and custom scripts.
• Refine detection rules to reduce false positives and improve MTTD and MTTR.
• Integrate automated containment mechanisms across access management, cloud IAM, and Web3 security providers.
• Maintain incident records, forensic evidence, and documentation aligned with SOC 2 and ISO compliance frameworks.
• Prepare operational metrics, alert-volume analysis, and threat reports for leadership.
• Monitor Web3 threats and emerging smart-contract exploit techniques and threat actors targeting L2 ecosystems.
• Coordinate intelligence sharing with external security researchers, bug bounty programs, and Web3 security alliances.
• Participate in incident-response drills, security reviews, and audit remediation with external security partners.

Benefits

• Competitive compensation package, including salary, benefits, and performance-based incentives.
• Meaningful equity.
• Opportunity to work on open-source software at the frontier of Web3.
• Opportunity to safeguard cutting-edge Web3 and ZK-rollup infrastructure.
• Dynamic and collaborative work environment with a passionate and talented team.
• Platform to influence the future of decentralized technologies and financial systems.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed