{"id":2103373,"url":"https://alion.io/job/ethereal-news-soc-analyst","title":"SOC Analyst","company":{"id":3875570,"name":"Consensys","domain":"consensys.com","url":"https://alion.io/company/consensys-3","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":100,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":182000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"Core Blockchain","optional":false},{"name":"DeFi","optional":false},{"name":"Ethereum","optional":false},{"name":"GitHub","optional":false},{"name":"Google Workspace","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linea","optional":false},{"name":"Linux","optional":false},{"name":"MetaMask","optional":false},{"name":"Notion","optional":false},{"name":"Python","optional":false},{"name":"Rollup","optional":false},{"name":"SIEM","optional":false},{"name":"Smart Contracts","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-08T18:45:03Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-30T17:37:07Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":20},"description":"About Consensys\nConsensys Incorporated is an independent blockchain infrastructure company, spun out of Consensys Software Inc. - one of the world's leading blockchain technology companies and the primary development organization behind the Ethereum ecosystem.\nWe build and operate neutral, institutional-grade blockchain infrastructure that connects banks, asset managers, custodians, and financial market infrastructures to digital asset networks, meeting the non-negotiable standards of institutional finance: privacy, scalability, resilience, security, and regulatory readiness.\nHeadquartered in Miami, Florida, and operating across the US, Europe, and Australia, Consensys Incorporated launched as an independent entity in September 2026 and is building the team to match its ambition.\nWhy This Role Exists\nFollowing Consensys's strategic transition into two independent entities (MetaMask for consumer platforms and Consensys focusing on protocols and institutional infrastructure), we are seeking an experienced Security Operations Center (SOC) Analyst to join our security organization. Consensys powers the core infrastructure driving the decentralized web, including Linea mainnet and the open-source Lineth ZK rollup stack recently donated to Linux Foundation Decentralized Trust. The SOC Analyst will be responsible for architecting, building, and operating a comprehensive 24/7 monitoring and alerting ecosystem across our entire digital asset footprint.\nThis role spans enterprise IT SaaS environments, core blockchain infrastructure, and Web3 smart contract security. The SOC Analyst will bridge traditional cybersecurity operations with cutting-edge Web3 threat detection, protecting our corporate IT stack (JumpCloud, AWS, Google Workspace, GitHub, Notion, Zoom), Linea mainnet infrastructure, and ecosystem DeFi protocols against emerging cyber threats and exploits using tools such as Hypernative, Hexagate, and Blockaid.\nWhat You’ll Own\n1. Enterprise IT Security & SaaS Monitoring\nArchitect and maintain centralized log collection, SIEM integration, and incident response services across AWS (utilizing Amazon GuardDuty and AWS CloudTrail) and corporate IT services including JumpCloud, Google Workspace, GitHub, Notion, and Zoom.\n\nDevelop custom detection rules and alert logic to detect unauthorized access, privilege escalation, credential compromise, and anomalous user activity.\n\nEnsure complete security logging visibility, audit readiness, and access control management across all corporate platforms.\n\n2. Infrastructure & ZK-Rollup Monitoring (Linea & Lineth)\nEstablish real-time security monitoring for Linea mainnet and the open-source Lineth ZK rollup stack (including Besu execution layer, Maru consensus, coordinator, and provers).\n\nMonitor RPC endpoints, sequencer performance, L1/L2 messaging reliability, state root finalization, and infrastructure telemetry.\n\nCollaborate with the DevOps team and core engineering teams to detect and mitigate infrastructure threats, DDoS attacks, and zero-day vulnerabilities.\n\n3. Web3 & Smart Contract Threat Detection\nImplement and tune real-time Web3 threat monitoring platforms including Hypernative, Hexagate, and Blockaid.\n\nBuild automated alerts to detect suspicious smart contract interactions, flash loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge activity on Linea mainnet.\n\nPerform onchain forensics and transaction trace analysis to safeguard ecosystem DeFi protocols and institutional assets.\n\n4. Incident Response & Threat Hunting\nServe as a primary responder for security alerts originating from IT SaaS, cloud infrastructure, and Web3 protocol layers, utilizing Grafana Cloud IRM to manage on-call rotations and incident management.\n\nLead triage, investigation, containment, and post-mortem root cause analysis for confirmed security incidents.\n\nProactively conduct threat hunting across system logs, cloud environments, and onchain transaction streams.\n\n5. Security Automation & Detection Engineering\nAutomate incident response playbooks and triage workflows using SOAR tools and custom scripts (Python, Go, Bash).\n\nContinuously refine detection rules to reduce false positives and improve Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).\n\nIntegrate automated containment mechanisms across access management, cloud IAM, and Web3 security providers.\n\n6. Compliance, Governance, and Reporting\nMaintain detailed incident records, forensic evidence, and documentation in alignment with SOC2 and ISO compliance frameworks.\n\nPrepare security operational metrics, alert volume analysis, and threat reports for leadership.\n\nEnsure compliance with corporate security policies and access controls across all environments.\n\n7. Threat Intelligence & Ecosystem Collaboration\nMonitor Web3 threat landscapes, tracking emerging smart contract exploit techniques and threat actors targeting L2 ecosystems.\n\nCoordinate with external security researchers, bug bounty programs, and Web3 security alliances to share intelligence.\n\nParticipate in incident response drills, security reviews, and audit remediation with external security partners.\n\nWhat We Are Looking For\n3-5+ years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 environments.\n\nHands-on experience configuring and maintaining monitoring, threat detection, and incident analysis services for AWS (such as Amazon GuardDuty and AWS CloudTrail) and enterprise IT platforms (JumpCloud, Google Workspace, GitHub, Notion, and Zoom).\n\nDirect experience using Web3 security and onchain monitoring tools such as Hypernative, Hexagate, and Blockaid.\n\nDeep technical understanding of Ethereum, L2 scaling architectures, ZK-rollups (Lineth stack, Besu execution, prover systems), and smart contract vulnerabilities.\n\nProficiency in log management, monitoring platforms (such as Grafana), SIEM/SOAR platforms, and scripting languages (Python, Go, Bash, or SQL).\n\nFamiliarity with SOC2, ISO 27001, NIST, or SANS security frameworks.\n\nStrong communication, problem-solving, and analytical skills in a fast-paced, remote-first environment.\n\nBenefits of This Role\nThe opportunity to safeguard cutting-edge Web3 and ZK-rollup infrastructure at the forefront of blockchain technology.\n\nA dynamic and collaborative work environment with a passionate and talented team.\n\nCompetitive compensation package, including salary, benefits, and performance-based incentives.\n\nA platform to influence the future of decentralized technologies and financial systems.\n\nReporting Structure\nReports to: Head of Security.\n\nTeam: Working closely with our dedicated DevOps team, Head of Security, and Site Reliability Engineer, this role will serve as the founding member of the incident response team.\n\nWorking at Consensys\nWe are a fully remote, globally distributed company. We hire the best people wherever they are, work asynchronously, and judge each other on impact rather than hours or location. We offer competitive compensation, meaningful equity, and the chance to work on genuinely open source software at the frontier of web3.\nConsensys is an equal opportunities employer. We celebrate diversity and are committed to building an inclusive environment for all employees.","description_format":"text","description_chars":7278,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cryptocurrencies","Blockchain Infrastructure","Asset Tokenization"],"lifecycle":[{"event":"open","at":"2026-10-08T19:29:22Z"},{"event":"close","at":"2026-10-11T22:45:02Z"},{"event":"reopen","at":"2026-10-14T05:09:25Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.802,"p_room":0.55,"age_days":21,"expected_fill_days":18,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/ethereal-news-soc-analyst","json_url":"https://alion.io/job/ethereal-news-soc-analyst.json","meta":{"generated_at":"2026-10-30T20:07:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9947,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3875570},"rest":"https://alion.io/mcp/rest/get_company?id=3875570"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fethereal-news-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fethereal-news-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fethereal-news-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ethereal-news-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fethereal-news-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2103373}},{"tool":"search_jobs","arguments":{"company":"consensys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2103373},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}