Security Analyst

Figment powers the future of Web3 through industry-leading blockchain infrastructure. As the leading provider of staking solutions,
we help 500+ institutional clients optimize their crypto rewards
, including top exchanges, asset managers, wallets, foundations, custodians, and major token holders. Our clients trust Figment for a comprehensive suite of services, including reward optimization, cutting-edge API development, detailed rewards reporting, seamless partner integrations, governance support, and slashing protection.

Backed by a team of passionate and intelligent Figmates, with a 100% remote-first global presence across 12 countries
, our company is on a mission to accelerate the adoption, growth, and long-term success of the Web3 ecosystem. We’re building the infrastructure that will power the decentralized future.

As a fast-growing tech company, we’re looking for builders and innovators — people who thrive in the face of uncertainty and are motivated to make an impact. We are also looking for true teammates - people who are genuine, humble, and driven to level up together. If you're excited to shape the future, contribute to an energetic company culture, and work at the cutting edge of blockchain technology, we want you to join our team and help us lead the charge!

As a Security Analyst on the Figment Security Team, you will be on the front lines of protecting our cutting-edge blockchain infrastructure. This is not a traditional SOC role. You will operate in a modern, code-driven environment where your primary mission is to engineer high-fidelity detections, triage security alerts, analyze logs, respond to incidents, and continuously improve our security posture.

You will be a key player in our "security-as-code" culture, using Python to write detections utilizing your knowledge of security of operating systems, networking and protocols, firewalls, databases and cloud platforms. Beyond technical execution, you will be a trusted security educator, researching the latest tactics, threats, and procedures (TTPs) across the industry and sharing that knowledge to uplift the entire organization.

• Detection Engineering: Design, build, and tune real-time detections in Python, focusing on threats to our cloud-native services, SaaS applications, and blockchain infrastructure.
• Incident Response & Analysis: Act as the primary responder for escalated security incidents. Analyze alerts to conduct in-depth log analysis and perform investigations to determine scope, impact, and root cause.
• Threat Hunting: Proactively hunt for undetected malicious activity and emerging threats using available security tooling and custom queries.
• Automation & Tooling: Develop scripts and tools to automate security workflows, data enrichment, and repetitive security tasks. Our environment is built on code—you will contribute directly to it.
• Security
  
  Education:
  
  Research and analyze emerging threats in the blockchain and Web3 space. Communicate your findings clearly to both technical and non-technical audiences to strengthen our company-wide security awareness.
• Protect Critical Assets: Collaborate with engineering teams to develop and refine security strategies for protecting high-risk, internet-facing blockchain infrastructure.
• Develop Runbooks: Create detailed processes, procedures, and workflows to support Blue Team operations and response activities.

• 3+ years of hands-on experience in a security operations, detection engineering, or incident response role, preferably within a cloud-first environment.
• Proficiency in Python
  , specifically for data analysis, automation, and writing security detections. You must be comfortable writing and maintaining Python code.
• Hands-on experience with a SIEM platform (e.g., Panther, Splunk, Sumo Logic). Direct experience analyzing logs from cloud and SaaS applications is essential.
• Demonstrable experience securing AWS environments and a strong understanding of core services (e.g., EC2, S3, IAM, Cloud Trail, VPC).
• A "security-as-code" mindset with practical experience using tools like Terraform and Git/Git Hub for managing…