Security Analyst

About the role

We are looking for a Security Analyst to join Aptos Foundation, a people‑first blockchain platform. In this hands‑on, cross‑functional position you will support security operations, access governance and threat response across a fast‑moving, remote‑first organization.

Key responsibilities

• Respond to and triage alerts related to phishing, impersonation, scams and brand abuse, escalating credible threats.
• Coordinate the day‑to‑day operation of the bug bounty program, including researcher communication, issue tracking and reporting.
• Conduct user access reviews and audit security settings, access configurations and administrative controls across SaaS platforms and internal infrastructure.
• Maintain recurring operational security workflows such as documentation, process tracking and follow‑up.

Required profile

• 2+ years of experience in a security‑focused role (security operations, IAM, application security support or similar).
• Strong attention to detail and ability to manage multiple concurrent workflows.
• Clear written communication and confidence working with both technical and non‑technical stakeholders.
• Self‑motivated, organized and comfortable operating independently in a remote‑first environment.

Required skills

• Knowledge of phishing response, authentication, access control and least‑privilege principles.
• Familiarity with common vulnerability classes and the OWASP Top 10.
• Experience with bug bounty program coordination and vulnerability disclosure processes.
• Hands‑on experience with SaaS administration, access reviews and IAM processes.
• Understanding of web3 threat patterns and blockchain security concepts.
• Ability to automate operational workflows using LLMs or AI tooling (e.g., Claude).

What we offer

• Competitive base salary ranging from $120 k to $180 k per year.
• Remote‑first work environment with flexibility.
• Opportunity to work on security for a leading blockchain platform.