Security Engineer - Incident Response

Job description

About Asymmetric Research Asymmetric Research ("AR") is a boutique security venture specializing in deep partnerships with L1/L2 blockchains and DeFi protocols. We operate across four core domains of web3 security: research, engineering, incident response, and infrastructure services. Our fully remote team brings decades of security-first experience from organizations including Google, Netflix, Mozilla, Stripe, and Jump Crypto. We value autonomy, professionalism, and a relentless commitment to excellence. About the Role We are seeking an experienced Security Engineer who will be working in direct support of the Solana Incident Report Network (SIRN). In this role, you will serve as a primary operational resource for incident command, triage, and response workflows across the SIRN program. You will work closely with AR's incident response team and project stakeholders to ensure timely, well-documented, and effectively coordinated responses to security events affecting the Solana ecosystem. This is a hands-on, execution-focused role. It's ideal for a practitioner who thrives in high-tempo environments and is comfortable owning end-to-end incident lifecycle responsibilities. Key Responsibilities Incident Command & Triage - Serve as Incident Commander for SIRN-related security cases, owning coordination from detection through resolution and post-incident review. - Lead incident triage efforts, rapidly assessing scope, severity, and impact to drive prioritization and response decisions. - Coordinate with internal AR teams and external Solana ecosystem stakeholders throughout active incident lifecycles. - On-call availability Telemetry & Detection - Develop, tune, and triage telemetry signals relevant to SIRN use cases, including on-chain event monitoring and infrastructure-level detection. - Identify gaps in current detection coverage and propose improvements to signal fidelity and alert quality. Runbook Curation - Author, maintain, and continuously improve incident runbooks tailored to SIRN scenarios. - Ensure runbooks reflect current threat landscape, ecosystem-specific attack patterns, and lessons learned from prior incidents. Project & Logistics Support - Provide operational and logistical support to the SIRN project team, including tracking deliverables, coordinating stakeholder communications, and ensuring project milestones are met. - Escalate to AR Engineering and Consulting leads as appropriate. - Maintain clear documentation across all assigned workstreams. Qualifications Required - 3+ years of security engineering or incident response experience, with demonstrated depth in operational IR roles. - Experience with Web3 security, blockchain incident response, or protocol-level threat analysis (Solana ecosystem experience a strong plus). - Strong communication skills - able to convey technical findings clearly to both engineering teams and non-technical stakeholders under pressure. - Ability to work independently and with high autonomy in a fully remote setting. - Background in Web2 security operations (EDR, MDM, Google Workspace, or equivalent platforms). - Familiarity with DeFi attack patterns, smart contract exploits, or on-chain forensics. Preferred - Bachelor's or Master's degree in Computer Science, Information Security, or a related field (or equivalent practical experience). - Proven experience as an Incident Commander or equivalent lead role in complex, fast-moving security events. - Hands-on experience developing or tuning telemetry, detection pipelines, or monitoring systems (SIEM, on-chain alerting, or equivalent).