Security Engineer - Incident Response

About Asymmetric Research

Asymmetric Research (\"AR\") is a boutique security venture specializing in deep partnerships with L1/L2 blockchains and De Fi protocols.

We operate across four core domains of web3 security: research, engineering, incident response, and infrastructure services.

Our fully remote team brings decades of security-first experience from organizations including Google, Netflix, Mozilla, Stripe, and Jump Crypto.

We value autonomy, professionalism, and a relentless commitment to excellence.

About the Role

We are seeking an experienced Security Engineer who will be working in direct support of the

Solana Incident Report Network (SIRN) .

In this role, you will serve as a primary operational resource for incident command, triage, and response workflows across the SIRN program.

You will work closely with AR's incident response team and project stakeholders to ensure timely, well-documented, and effectively coordinated responses to security events affecting the Solana ecosystem.

This is a hands‑on, execution-focused role.

It's ideal for a practitioner who thrives in high‑tempo environments and is comfortable owning end‑to‑end incident lifecycle responsibilities.

Key Responsibilities

• Incident Command & Triage
• Serve as

Incident Commander for SIRN-related security cases, owning coordination from detection through resolution and post‑incident review.

• Lead incident triage efforts, rapidly assessing scope, severity, and impact to drive prioritization and response decisions.
• Coordinate with internal AR teams and external Solana ecosystem stakeholders throughout active incident lifecycles.
• On‑call availability
• Telemetry & Detection
• Develop, tune, and triage telemetry signals relevant to SIRN use cases, including on‑chain event monitoring and infrastructure-level detection.
• Identify gaps in current detection coverage and propose improvements to signal fidelity and alert quality.
• Runbook Curation
• Author, maintain, and continuously improve incident runbooks tailored to SIRN scenarios.
• Ensure runbooks reflect current threat landscape, ecosystem‑specific attack patterns, and lessons learned from prior incidents.
• Project & Logistics Support
• Provide operational and logistical support to the SIRN project team, including tracking deliverables, coordinating stakeholder communications, and ensuring project milestones are met.
• Escalate to AR Engineering and Consulting leads as appropriate.
• Maintain clear documentation across all assigned workstreams.

Qualifications

• Required
• 3+ years of security engineering or incident response experience, with demonstrated depth in operational IR roles.
• Experience with Web3 security, blockchain incident response, or protocol-level threat analysis (Solana ecosystem experience a strong plus).
• Strong communication skills – able to convey technical findings clearly to both engineering teams and non-technical stakeholders under pressure.
• Ability to work independently and with high autonomy in a fully remote setting.
• Background in Web2 security operations (EDR, MDM, Google Workspace, or equivalent platforms).
• Familiarity with De Fi attack patterns, smart contract exploits, or on‑chain forensics.
• Preferred
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• Proven experience as an Incident Commander or equivalent lead role in complex, fast‑moving security events.
• Hands‑on experience developing or tuning telemetry, detection pipelines, or monitoring systems (SIEM, on‑chain alerting, or equivalent).
• #J-18808-Ljbffr