Chainway Labs

Security Operations

• Help run day-to-day operational security: monitoring, tooling administration, user support, internal controls, and hands-on incident response support.
• Participate in the incident rotation (on-call / responder schedule as defined by the team).
• Triage and escalate security alerts (SIEM/EDR/cloud/app signals).
• Assist with incident handling: evidence collection, timeline building, containment steps, comms notes, and post-incident action tracking.
• Maintain and improve incident runbooks, checklists, and escalation paths.
• Administer and support security tools such as: SIEM / log pipelines (basic rule tuning, alert routing, dashboards, integrations).
• EDR policy checks and operational maintenance (triage, device status follow-ups).
• Improve signal quality: reduce noise, identify monitoring gaps, ensure coverage for critical systems.
• Participate in internal control routines (periodic checks, evidence collection, documentation updates).
• Help with access control audits (reviews, recertification cycles, exception tracking).
• Help operate the bug bounty program: initial triage, reproduction, severity suggestions, routing to engineering, tracking fixes to closure.
• Write and maintain simple scripts (Python and/or Bash preferred) to automate repetitive security ops tasks (enrichment, reporting, inventory sync, alert deduping, API pulls).

SecOps Engineer