• You will own the Detection & Response (D&R) function across our hybrid Web2+Web3 environment. • From designing high-fidelity detections to orchestrating rapid incident containment, both on-chain and off, you will be at the forefront of protecting a fast-moving DeFi platform. • Detection Engineering: Design, build, and continuously tune detection pipelines for cloud, container, and blockchain telemetry (AWS/GCP logs, K8s events, on-chain data streams). • Maintain real-time monitoring using SIEM/XDR solutions. • Integrate blockchain-specific monitoring tools (e.g. Hypernative, Hexagate, etc.) with cloud-native telemetry. • Response Automation: Build SOAR workflows and automated containment playbooks. • Implement on-chain transaction guardrails and automated policy enforcement for suspicious smart-contract activity. • Incident Management: Lead incident lifecycle end-to-end: triage, scope, containment, eradication, recovery, and post-mortems. • Conduct blockchain forensics, smart contract incident analysis, and web2 investigations. • Threat Hunting & Purple Teaming: Proactively identify emerging TTPs by mining multi-source telemetry. • Partner with other engineers to simulate attack scenarios, including DeFi-specific threats (MEV exploitation, oracle manipulation, re-entrancy, governance takeovers). • Security Architecture & Collaboration: Partner with DevOps, Backend, and Smart Contract teams to integrate detection logic into pipelines. • Conduct security design reviews for new features, focusing on both application logic and blockchain protocol risks. • Influence secure-by-default engineering practices across Web2 and Web3 stacks.