Blockchain Security Software Engineer, Hexagate

The engineering team at Chainalysis is inspired by solving the hardest technical challenges and creating products that build trust in cryptocurrencies. We’re a global organization with teams in Denmark, UK, Canada, the USA, and Israel who thrive on the challenging work we do and doing it with other exceptionally talented teammates. Our industry changes every day and our job is to create user facing products supported by a flexible and scalable data platform allowing us to adapt to those rapid changes and bring value to our customers. We're currently looking for an Blockchain Security Software Engineer to join our Hexagate team. Hexagate builds cybersecurity products that protect on-chain and web3 assets. We sit at the intersection of cybersecurity and blockchains—an adversarial space where attacks are constant and response time matters. We’re building a real-time on-chain detection and response platform that combines ML-driven threat intelligence, custom detections, and an LLM-powered rules engine to protect on-chain assets. What you'll be doing: - Track real threats: analyze active attack patterns (wallet compromise, laundering flows, phishing-driven drains, malicious contract interactions). - Build detections: turn attacker behavior into monitors using our internal monitoring language (DSL), heuristics, and model signals. - Validate and tune: measure precision/recall, reduce false positives, and harden detections against evasion. - Operationalize fast: work with engineers to ship detections into production safely (testing, rollout, monitoring, rollback). - Drive coverage: identify gaps, propose new signals, and expand detection logic across chains and assets. - Partner closely: collaborate with product and engineering to align detections with customer workflows and response actions. We’re looking for candidates who have: - Strong understanding of blockchain fundamentals: transactions, token standards, address behavior, bridges, MEV/basic mempool concepts (as relevant), and common attacker playbooks. - Experience in an adversarial domain (security, fraud, abuse, risk) and comfort reasoning about evasive behavior. - Ability to go from “threat story” to production detection: signal selection, thresholds, edge cases, and validation. - Strong Python skills and comfort working with data (queries, datasets, analysis). - Clear communication and strong collaboration habits. You might also have: - Experience investigating on-chain incidents or building detection rules. - Familiarity with anomaly detection, graph heuristics, or statistical modeling. - Experience working with real-time pipelines or streaming systems. - Experience writing detections in a DSL / rules engine. Technologies we use: - Languages: Python (plus Rust/Go in the platform) - Infra: Kubernetes, AWS, Grafana, Pulumi - Streaming & Messaging: NATS - Data stores: PostgreSQL, Redis, S3 About Chainalysis Blockchain technology is powering a growing wave of innovation. Businesses and governments around the world are using blockchains to make banking more efficient, connect with their customers, and investigate criminal cases. As adoption of blockchain technology grows, more and more organizations seek access to all this ecosystem has to offer. That’s where Chainalysis comes in. We provide complete knowledge of what’s happening on blockchains through our data, services, and solutions. With Chainalysis, organizations can navigate blockchains safely and with confidence. You belong here.  At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture. We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.