Senior Security Engineer (Insider Trust)

Join Chainlink Labs, a leading company in the blockchain industry, as a Senior Security Engineer (Insider Trust). In this role, you will be responsible for identifying, investigating, and mitigating security policy violations and deviations from best practices. You will also help architect detection strategies and build out scalable infrastructure. The ideal candidate will have 7+ years of experience in technical investigations and insider threat capacity, deep experience in macOS environments, and a collaborative communication style.

• Lead the effort in identifying, investigating, and mitigating security policy violations and deviations from security best practices.
• Own and lead building out the Insider Trust Team’s infrastructure to engineer and automate end-to-end detection and investigation workflows.
• Drive projects with a focus on Insider Risks, ranging from access abuse and intellectual property theft, to novel risks emerging within the blockchain/Web3 space.
• Knowledge of Insider Threat tactics and attack paths, data exfiltration techniques, and experience running and leading insider incidents independently and as part of a team
• Broad familiarity with Insider Threat investigations of modern cloud infrastructure
• Strong critical thinking skills, as well as integrity, objectivity, and maturity
• 7+ years of experience conducting technical investigations and working in an Insider Threat capacity. We are seeking senior candidates
• Deep experience in macOS focused environments, including log collection, log analysis, digital investigations, and forensics
• Prior success in remote-first environments as a self-starter Insider Threat security engineer
• Experience with detection‑as‑code development and workflows in Sigma
• Previous scripting experience (Python, Bash, or similar) to include scripting for data parsing/enrichment and automations
• Collaborative, straightforward communication skills with the ability to write clear incident updates and summaries. Ability to explain risk, impact, and trade‑offs to both technical and non‑technical stakeholders and have a proven record of building trust with partner teams during high‑pressure situations
• Open-source contributions to security related projects, with a focus on Insider Threat
• Domain experience with blockchain/Web3 threats
• Usage of AI technology to augment and enhance Insider Threat investigations