Principal Security Engineer, Detection & Response

Stack

Responsibilities

• ▹Proactively identify and respond to emerging security threats across cloud, endpoint, blockchain and AI surfaces.
• ▹Build detection and response capability for blockchain and crypto-native threats: on-chain anomalies, custody-vault interactions, wallet abuse, smart contract exploitation.
• ▹Develop detection coverage for cloud-native attacks across AWS + EKS: IAM compromise, identity federation abuse, lateral movement in containerized workloads, runtime exploitation and misconfiguration drift.
• ▹Extend detection for AI-specific risks: shadow AI adoption, unauthorized AI integrations, agentic workflow and MCP tool abuse, AI-driven credential exposure.
• ▹Advance the deployment of AI in the SOC function, including detection triage, enrichment and analyst-acceleration workflows.
• ▹Develop plans to manage and maintain core tooling such as SIEM and orchestration platforms.
• ▹Identify gaps in infrastructure and work with business partners to gain visibility through logging and detection.
• ▹Lead and respond to incidents, collaborating across teams to investigate and resolve.
• ▹Develop detection techniques to identify anomalous behaviors and attacks across the environment.

Requirements

• ▹Strong response background.
• ▹Some exposure to insider risk.
• ▹Willingness to perform on-call duties, including occasional nighttime and weekend incident response.

Soft skills

About the company

Circle is one of the world's leading internet financial platform companies, building on digital assets, payment applications and programmable blockchain infrastructure. Its platform includes the world's largest regulated stablecoin network, USDC, the Circle Payments Network and the Arc blockchain.