Chainalysis - Staff Threat Detection Engineer

• Lead Detection Strategy: Own the end-to-end roadmap for corporate threat detection, mapping coverage against frameworks like MITRE ATT&CK. • Engineeer High-Fidelity Detections: Design and maintain scalable detection logic across SIEM, EDR, and cloud logging platforms (AWS/GCP). • Conduct Threat Hunting: Plan and execute hypothesis-driven hunting campaigns to uncover novel TTPs and turn findings into durable controls. • Perform Risk Modeling: Lead threat assessments and design reviews for new technology on-boarding and product design changes. • Optimize Response: Partner with Incident Response to refine alert quality, automate triage playbooks, and reduce time-to-containment. • Mentor & Influence: Provide technical leadership and mentorship to the DaRE team while influencing product teams to improve visibility and remediate gaps. • We’re looking for candidates who have: • 8+ years of experience in detection engineering, SOC, or incident response at scale. • Deep expertise in building and tuning detections within SIEM, EDR, and log analytics platforms. • Advanced proficiency in writing complex detection queries (e.g., KQL, SPL, SQL). • Demonstrated experience detecting modern attacker TTPs across endpoint, identity, and cloud environments. • Strong scripting skills (Python, Bash) for automation and enrichment. • Proven ability to lead cross-functional security initiatives with IT and Engineering stakeholders.