Senior Security Engineer, Insider Trust

Chainlink Labs
United States, Canada
Workplace: RemoteFull timeUSD 110,000 - 269,000 annuallyFunction: CybersecurityExperience: 7+ yearsSkills: ["Critical thinking","Integrity","Objectivity","Maturity","Communication","Collaboration","Trust building"]

Lead the Insider Trust Team’s insider-risk program by building and automating end-to-end detection and investigation workflows. Develop and tune detection rules in Sigma, drive projects spanning access abuse and intellectual property theft, and modernize detection infrastructure. Partner with Threat Management, People, Legal, IT, and Engineering to support technical investigations, evidence, and sensitive interviews—helping prevent security policy deviations and emerging Web3 insider threats.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Chainlink Labs
Chainlink Labs
1 month ago

Senior Security Engineer, Insider Trust

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Lead the Insider Trust Team’s insider-risk program by building and automating end-to-end detection and investigation workflows. Develop and tune detection rules in Sigma, drive projects spanning access abuse and intellectual property theft, and modernize detection infrastructure. Partner with Threat Management, People, Legal, IT, and Engineering to support technical investigations, evidence, and sensitive interviews—helping prevent security policy deviations and emerging Web3 insider threats.
Location: United States, Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own and lead building Insider Trust infrastructure to engineer and automate end-to-end detection and investigation workflows.
  • •Develop, measure, and tune detection rules in Sigma for effective, sustainable operations.
  • •Drive insider-risk projects from access abuse and IP theft to novel blockchain/Web3 insider risks.
  • •Collaborate with cross-functional teams (Threat Management, People, Legal, IT, Engineering) to provide technical expertise and evidence for investigations.
  • •Assist in sensitive interviews during insider threat investigations and identify modernization opportunities to improve detection.

Pay and Benefits

Salary: USD 110,000 - 269,000 annually

Key Requirements

  • •7+ years of experience conducting technical investigations in an Insider Threat capacity; senior candidates sought.
  • •Deep experience with macOS environments, including log collection, log analysis, digital investigations, and forensics.
  • •Knowledge of Insider Threat tactics and attack paths, data exfiltration techniques, and experience running insider incidents independently and in a team.
  • •Broad familiarity with Insider Threat investigations of modern cloud infrastructure.
  • •Strong critical thinking plus integrity, objectivity, and maturity.
Experience:7+ yearsInsider threatDigital forensicsBlockchainWeb3CloudRemote-first
Skills:Critical thinkingIntegrityObjectivityMaturityCommunicationCollaborationTrust building
Tech Stack:MacOSLog analysisDigital investigationsForensicsSigmaDetection-as-codePythonBashData parsingData enrichmentAutomationCloud infrastructureBlockchainWeb3AI

Company Brief

Chainlink Labs
Chainlink Labs develops decentralized oracle networks and Web3 services that connect smart contracts to real-world data, enabling secure off-chain inputs, outputs, and computation for blockchains and enterprise applications.
Industry: Blockchain & Web3
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: San Francisco, United States
Founded: 2014
Glassdoor
Glassdoor: 3.6
WebsiteLinkedInGlassdoor