Keyrock

DevOps Engineer

• Cloud Infrastructure Management: Design, deploy, and maintain scalable and resilient infrastructure on AWS using Infrastructure-as-Code (IaC).
• Kubernetes Administration: Manage and optimize Kubernetes clusters for containerized applications, ensuring high availability and security.
• Automation & CI/CD: Implement and manage CI/CD pipelines for efficient deployment, testing, and monitoring of applications.
• Observability & Monitoring: Develop comprehensive monitoring solutions using Prometheus, Grafana, LGTM stack, or similar tools to improve system reliability.
• Security & Compliance: Apply best practices for cloud security, IAM policies, and compliance frameworks (SOC2, ISO 27001, etc.).
• Incident Response & Performance Optimization: Troubleshoot issues, perform root cause analysis, and implement fixes to optimize performance.
• Infrastructure as Code (IaC): Utilize Terraform, Ansible, or similar tools to automate infrastructure provisioning and configuration management.
• Collaboration & Knowledge Sharing: Work closely with software engineering, architecture and security teams to promote DevOps culture and best practices.
• Disaster Recovery & Reliability Engineering: Design failover and backup strategies to ensure business continuity in the event of failures.

Site Reliability Engineer

Data Analyst

• Scalable Quant Infrastructure: Assist in the development of modular Python-based libraries (utilizing Pandas, NumPy, and Polars) to standardize performance metrics and unify global trading data.
• Strategy Forensics: Perform deep-dive statistical analysis on trade-level data to decompose PnL drivers, isolate alpha decay, and identify execution drag or "toxic flow."
• Perp DEX Optimization: Analyze the incentive structures and market-making programs of leading protocols (e.g., Hyperliquid/HIP-3, Paradex, Lighter). You will help optimize our participation to maximize protocol rewards and capital efficiency.
• Operational Intelligence: Build and maintain automated workflows that convert raw L1/L2 order book data into actionable insights for the Trading and Investment Committees.
• Market Monitoring: Proactively track market microstructure signals and portfolio exposures to highlight emerging risks and identify underutilized liquidity opportunities.

Quantitative Analyst Intern

Security Operations

• 24/7 monitoring and alert triage across SIEM/EDR/cloud security tooling; identify false positives vs. credible threats and set appropriate severity.
• Initial investigation and enrichment: gather relevant logs/telemetry, add context, and document findings clearly in the case/ticketing system.
• Escalation and coordination: escalate confirmed/suspected incidents quickly and cleanly to L2/IR with a complete handoff (timeline, scope, IOCs, actions taken).
• Runbook execution: follow SOPs for common events (phishing, suspicious logins, endpoint detections, cloud key/token risk, malware alerts, data exfiltration signals), including containment actions you’re authorized to perform.
• Threat-aware analysis: map alerts to adversary behaviors (e.g., MITRE ATT&CK techniques) to improve understanding and escalation quality.
• Operational hygiene: maintain accurate shift handovers, update watchlists and investigation notes, and identify recurring alert patterns for tuning recommendations.

SOC Analyst, Level 1

• Take escalations from L1 and independently investigate complex, multi-signal alerts (identity compromise, cloud control-plane abuse, endpoint persistence, lateral movement, suspicious automation, data exfiltration).
• Perform deep log/telemetry analysis across SIEM, EDR, cloud logs, IAM signals, network telemetry, email security, and SaaS audit trails.
• Build and validate hypotheses, pivot across data sources, and produce clear incident timelines and scope assessments.
• Serve as technical incident lead for defined incident types/severities (or co-lead with IR), driving containment and eradication steps within authorized bounds.
• Execute and improve response playbooks for key scenarios (phishing/BEC, credential theft, token/key compromise, suspicious API activity, ransomware indicators, insider risk signals).

SOC Analyst, Level 2

Security Engineer

• Own a portfolio of security programs (planning, resourcing, milestones, dependencies, risk/issue management, and outcomes).
• Create and maintain multi-quarter roadmaps aligned to Keyrock’s business and operating model across venues and services (CEX/DEX and liquidity services).
• Establish governance and operating cadence: steering meetings, status reporting, program reviews, and executive updates.
• Support the CISO in delivering firmwide initiatives.
• Partner with Security and Engineering teams to drive key initiatives such as: access governance, secrets management, vulnerability remediation, security logging/monitoring improvements, endpoint/security baseline, and secure SDLC enablement.
• Help mature control coverage and evidence for internal/external assurance needs (as applicable in a financial-services context).
• Partner with the Director of GRC to support GRC and audit initiatives.
• Partner with Security Operations to improve incident preparedness through playbooks, tabletop exercises, lessons learned, and operational runbooks—ensuring security response stays effective in a high-availability trading environment.
• Act as the “glue” across technical and business stakeholders—clarifying ownership, unblocking delivery, and keeping programs moving with crisp communication.
• Build lightweight, scalable processes that improve security consistency without slowing teams.

Site Reliability Engineer

Quantitative Analyst Intern

SOC Analyst, Level 1

SOC Analyst, Level 2

Senior Security Program Manager