Security Engineer - Incident Response
Pubblicato il 16-08-2026 - SOLANA FOUNDATION in Veronella
About Asymmetric Research
Asymmetric Research ("AR") is a boutique security venture specializing in deep partnerships with L1/L2 blockchains and DeFi protocols. We operate across four core domains of web3 security: research, engineering, incident response, and infrastructure services. Our fully remote team brings decades of security-first experience from organizations including Google, Netflix, Mozilla, Stripe, and Jump Crypto. We value autonomy, professionalism, and a relentless commitment to excellence.
About the Role
We are seeking an experienced Security Engineer who will be working in direct support of the Solana Incident Report Network (SIRN) . In this role, you will serve as a primary operational resource for incident command, triage, and response workflows across the SIRN program. You will work closely with AR's incident response team and project stakeholders to ensure timely, well-documented, and effectively coordinated responses to security events affecting the Solana ecosystem.
This is a hands‑on, execution-focused role. It's ideal for a practitioner who thrives in high‑tempo environments and is comfortable owning end‑to‑end incident lifecycle responsibilities.
Key Responsibilities
Incident Command & Triage
- Serve as Incident Commander for SIRN-related security cases, owning coordination from detection through resolution and post‑incident review.
- Lead incident triage efforts, rapidly assessing scope, severity, and impact to drive prioritization and response decisions.
- Coordinate with internal AR teams and external Solana ecosystem stakeholders throughout active incident lifecycles.
- On‑call availability
Telemetry & Detection
- Develop, tune, and triage telemetry signals relevant to SIRN use cases, including on‑chain event monitoring and infrastructure-level detection.
- Identify gaps in current detection coverage and propose improvements to signal fidelity and alert quality.
Runbook Curation
- Author, maintain, and continuously improve incident runbooks tailored to SIRN scenarios.
- Ensure runbooks reflect current threat landscape, ecosystem‑specific attack patterns, and lessons learned from prior incidents.
Project & Logistics Support
- Provide operational and logistical support to the SIRN project team, including tracking deliverables, coordinating stakeholder communications, and ensuring project milestones are met.
- Escalate to AR Engineering and Consulting leads as appropriate.
- Maintain clear documentation across all assigned workstreams.
Qualifications
Required
- 3+ years of security engineering or incident response experience, with demonstrated depth in operational IR roles.
- Experience with Web3 security, blockchain incident response, or protocol-level threat analysis (Solana ecosystem experience a strong plus).
- Strong communication skills – able to convey technical findings clearly to both engineering teams and non-technical stakeholders under pressure.
- Ability to work independently and with high autonomy in a fully remote setting.
- Background in Web2 security operations (EDR, MDM, Google Workspace, or equivalent platforms).
- Familiarity with DeFi attack patterns, smart contract exploits, or on‑chain forensics.
Preferred
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
- Proven experience as an Incident Commander or equivalent lead role in complex, fast‑moving security events.
- Hands‑on experience developing or tuning telemetry, detection pipelines, or monitoring systems (SIEM, on‑chain alerting, or equivalent).
#J-18808-Ljbffr