Principal SOC Analyst

February 15

Apply Now

Receive Emails with Similar Jobs

MetaMask

WebsiteLinkedInAll Job Openings

MetaMask is a leading self-custodial crypto wallet that serves as a gateway to blockchain applications. Available as a browser extension and mobile app, it enables users to track and manage their web3 assets securely and conveniently. With features such as buying, selling, staking, and bridging crypto tokens, MetaMask empowers over 100 million users worldwide to control their digital assets and interact on the decentralized web with privacy and security.

51 - 200 employees

Founded 2016

₿ Crypto

🌐 Web 3

💳 Fintech

📋 Description

• As a key member of our SOC, you'll drive security objectives and improvements across both web2 and web3 environments. • You'll set standards for our Analyst Team, developing processes and playbooks for a world-class Security Operation that spans traditional and blockchain-based technologies. • Your expertise will be crucial in addressing complex security incidents, providing insights, and driving continuous improvement. • With a passion for security, you'll stay current on emerging trends in both domains, analyze new threats, and lead investigations into exciting incidents. • This role bridges conventional cybersecurity with web3, ensuring comprehensive protection across our entire technological landscape.

🎯 Requirements

• 6+ years of experience in IT Security, specifically in a SOC environment, with exposure to both traditional and blockchain-based systems. • Deep understanding of incident response best practices and processes across web2 and web3 environments. • Experience with security tools for detection, diagnosis, containment, and remediation in both traditional and blockchain networks. • Familiarity with defense methods and techniques applicable to both conventional and crypto-asset protection. • Strong awareness of the cybersecurity landscape, including traditional threats and blockchain-specific vulnerabilities, with competence in malware analysis, root cause analysis, threat intelligence, SOAR, and EDR. • In-depth knowledge of managing security in cloud and decentralized environments, including vulnerability management, protective monitoring, and incident management. • Working knowledge of security compliance, assurance, risk management, business continuity, data protection, and main security standards (ISO2700x, CIS, NIST, SOC2), including emerging standards for blockchain security. • Highly developed, process-oriented skills for troubleshooting and problem-solving across diverse technological environments. • Experience with containerized environments, microservices, and their security implications, including container security and secrets management (Docker/Kubernetes/AKS). • Scripting experience in Python/Bash/Go or equivalent, with the ability to analyze and interact with smart contracts. • Understanding of blockchain technologies, consensus mechanisms, and common vulnerabilities in smart contracts and DeFi protocols. • Excellent verbal and written English skills, with the ability to communicate complex security concepts to both technical and non-technical audiences. • Nice to have: • Experience managing security in multi-cloud and decentralized environments. • Qualifications and certifications from information security bodies such as GIAC, ISC2, ISACA, ISA, CompTIA, or blockchain-specific certifications. • Technological degree in Computer Science, Cybersecurity, or equivalent. • Experience with blockchain forensics tools and techniques. • Knowledge of cryptography and its applications in both traditional and blockchain systems. • Familiarity with regulatory frameworks affecting both traditional finance and crypto assets. • Contributions to open-source security projects or blockchain protocols. • Experience in auditing smart contracts or conducting security assessments of DeFi protocols.