🛠 Tech Stack

💼 About This Role

You'll monitor and respond to security events as part of Polymarket's internal SOC team. You'll serve as the escalation point for confirmed threats, coordinating with a third-party SOC provider and conducting proactive threat hunting. This role offers exposure to blockchain and DeFi threat landscapes.

🎯 What You'll Do

• Monitor SIEM, EDR, NDR for alerts and anomalies
• Lead containment and recovery for confirmed incidents
• Perform threat hunting using MITRE ATT&CK TTPs
• Author and maintain SOC runbooks and playbooks

📋 Requirements

• 2+ years of SOC or incident response experience
• Proficiency with a SIEM platform (Palo Alto XSIAM preferred)
• Experience with EDR/XDR tooling (CrowdStrike, SentinelOne)
• Ability to triage phishing and malware alerts

✨ Nice to Have

• Experience managing MSSP or third-party SOC escalations
• Certifications like GCIA, GCIH, or CySA+
• Familiarity with cloud security in AWS, GCP, or Azure

🎁 Benefits & Perks

• 💰 Competitive salary & equity
• 🏖️ Unlimited PTO
• 🏥 Full Health, Vision, & Dental coverage
• 📈 401k match
• 💻 Hardware setup: MacBook Pro, big display & accessories

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager Interview· 45 min