Manager, Insider Trust

About Chainlink Chainlink is the industry-standard oracle platform bringing the capital markets onchain and powering the majority of decentralized finance (DeFi). The Chainlink stack provides the essential data, interoperability, compliance, and privacy standards needed to power advanced blockchain use cases for institutional tokenized assets, lending, payments, stablecoins, and more. Since inventing decentralized oracle networks, Chainlink has enabled tens of trillions in transaction value and now secures the vast majority of DeFi. Many of the world’s largest financial services institutions have also adopted Chainlink’s standards and infrastructure, including Swift, Euroclear, Mastercard, Fidelity International, UBS, S&P Dow Jones Indices, FTSE Russell, WisdomTree, ANZ, and top protocols such as Aave, Lido, GMX and many others. Chainlink leverages a novel fee model where offchain and onchain revenue from enterprise adoption is converted to LINK tokens and stored in a strategic Chainlink Reserve. Learn more at chain.link.

About the role

The Manager, Insider Trust will lead Chainlink Labs’ Insider Trust function while remaining directly involved in technical investigations and detection development. This player-coach role is responsible for protecting sensitive data, investigating potential insider risk, and strengthening our ability to identify and address concerning activity.

Responsibilities

• Lead, develop, and mentor the Insider Trust team.
• Direct and conduct investigations involving sensitive data, systems, and workforce activity.
• Build and improve detections, monitoring, and escalation workflows for insider risk.
• Ensure investigations are timely, proportionate, well documented, and supported by defensible evidence.
• Partner with Legal, People, IT, and Security throughout the investigation and response lifecycle.
• Identify control gaps and translate investigative findings into lasting technical and process improvements.
• Establish metrics that demonstrate program effectiveness, investigative quality, and detection coverage.
• Communicate sensitive findings clearly to both executive and working-level stakeholders.

Requirements

• 7+ years of experience in insider risk, detection engineering, security operations, incident response, digital forensics, data protection, threat hunting, or a related security field.
• 2+ years leading an insider risk, investigations, or closely related security team.
• Demonstrated ability to lead a team while remaining hands-on in technical investigations and detection development.
• Experience managing the full investigation lifecycle, including scoping, evidence collection, timeline development, analysis, documentation, escalation, and lessons learned.
• Strong knowledge of digital forensics, evidence preservation, chain of custody, incident-response coordination, and case management.
• Experience partnering with Legal and People teams on sensitive workforce investigations.
• Sound understanding of the legal, privacy, confidentiality, and