Senior Security Engineer Insider Trust
Chainlink Labs builds decentralized computing infrastructure for blockchain applications and onchain finance. Its platform provides real-world data, offchain computation, and secure cross-chain interoperability for financial institutions, developers, startups, and Web3 protocols.
Maintainer signals as of 8/14/2026
Projects
About Chainlink Labs
Chainlink Labs develops and maintains Chainlink, a decentralized computing platform and infrastructure layer for the verifiable web. Its technologies include decentralized oracle networks, data feeds, offchain computation, automation, confidential computing, and cross-chain interoperability through CCIP. The organization works with financial market infrastructures, asset managers, banks, DeFi protocols, developers, startups, and enterprises to connect existing systems and real-world data to blockchains, support asset tokenization, and enable onchain finance.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You lead the development of Insider Trust infrastructure and automate end-to-end detection and investigation workflows. You develop, measure, and tune Sigma detection rules, drive projects addressing insider risks, and provide technical expertise and evidence during insider investigations. You conduct technical investigations and sensitive interviews, collaborate with cross-functional partners, and implement improvements to modernize security operations.
Requirements
- 7+ years of experience conducting technical investigations and working in an Insider Threat capacity
- Deep experience in macOS-focused environments, including log collection, log analysis, digital investigations, and forensics
- Knowledge of Insider Threat tactics and attack paths
- Knowledge of data exfiltration techniques
- Experience running and leading insider incidents independently and as part of a team
- Familiarity with Insider Threat investigations of modern cloud infrastructure
- Strong critical thinking
- Integrity
- Objectivity
- Maturity
- Scripting experience with Python, Bash, or similar
- Experience with detection-as-code development and Sigma workflows
- Ability to write clear incident updates and summaries
- Ability to explain risk, impact, and trade-offs to technical and non-technical stakeholders
- Experience with blockchain/Web3 threats
Responsibilities
- Build and lead the Insider Trust Team’s infrastructure
- Automate end-to-end detection and investigation workflows
- Develop measure and tune detection rules in Sigma
- Drive projects addressing insider risks including access abuse and intellectual property theft
- Work with Threat Management People Legal IT and Engineering on insider investigations
- Provide technical expertise and evidence during insider investigations
- Assist with sensitive interviews during insider threat investigations
- Identify and implement areas of improvement and modernization
Benefits
- Long-term incentives
- Comprehensive benefits
