Blockchain Security Software Engineer

About the Blockchain Security Software Engineer Role at Chainalysis

The engineering team at Chainalysis thrives on solving complex technical challenges and developing products that foster trust in cryptocurrencies. As a global organization with teams across Denmark, UK, Canada, the USA, and Israel, we are committed to creating user-facing products supported by a flexible and scalable data platform. This allows us to rapidly adapt to the evolving cryptocurrency landscape and deliver significant value to our customers.

We are actively seeking a Blockchain Security Software Engineer to join our Hexagate team. Hexagate specializes in building cybersecurity products designed to protect on-chain and web3 assets. Operating at the dynamic intersection of cybersecurity and blockchains, this is an adversarial environment where attacks are constant and swift response is paramount. Our team is developing a real-time on-chain detection and response platform that integrates ML-driven threat intelligence, custom detections, and an LLM-powered rules engine to safeguard on-chain assets.

What You'll Be Doing

• Track real threats: Analyze active attack patterns including wallet compromise, laundering flows, phishing-driven drains, and malicious contract interactions.
• Build detections: Translate attacker behaviors into robust monitors using our internal monitoring language (DSL), heuristics, and advanced model signals.
• Validate and tune: Measure precision and recall, effectively reduce false positives, and harden existing detections against sophisticated evasion techniques.
• Operationalize fast: Collaborate with engineering teams to safely deploy detections into production, ensuring rigorous testing, smooth rollout, continuous monitoring, and effective rollback strategies.
• Drive coverage: Proactively identify gaps in our security posture, propose innovative new signals, and expand detection logic across various blockchains and asset types.
• Partner closely: Work in tandem with product and engineering colleagues to align detection strategies with customer workflows and necessary response actions.

We’re Looking for Candidates Who Have

• Strong understanding of blockchain fundamentals: Including transactions, token standards, address behavior, bridges, MEV/basic mempool concepts (as relevant), and common attacker playbooks.
• Experience in an adversarial domain: Such as security, fraud, abuse, or risk, coupled with comfort in reasoning about evasive behaviors.
• Ability to go from “threat story” to production detection: Encompassing signal selection, threshold definition, edge case handling, and validation processes.
• Strong Python skills: And comfort working extensively with data through queries, datasets, and analysis.
• Clear communication and strong collaboration habits: Essential for effective teamwork in a fast-paced environment.

You Might Also Have

• Experience investigating on-chain incidents or building detection rules.
• Familiarity with anomaly detection, graph heuristics, or statistical modeling.
• Experience working with real-time pipelines or streaming systems.
• Experience writing detections in a DSL / rules engine.

Technologies We Use

• Languages: Python (with Rust/Go used within the platform)
• Infra: Kubernetes, AWS, Grafana, Pulumi
• Streaming & Messaging: NATS
• Data stores: PostgreSQL, Redis, S3

About Chainalysis

Chainalysis provides comprehensive insights into blockchain activity through our data, services, and solutions, enabling businesses and governments worldwide to navigate the blockchain ecosystem safely and with confidence. We are committed to fostering a diverse and inclusive environment where all employees feel they belong.

Key skills/competency

• Blockchain Security
• Web3 Security
• On-chain Analysis
• Threat Detection
• Python Programming
• Cybersecurity
• Incident Response
• Fraud Detection
• Data Analysis
• Kubernetes