Senior Security Incident Detection Engineer
Worldcoin
About the Company:
Worldcoin (www.worldcoin.org) is an open-source protocol, supported by a global community of developers, individuals, economists and technologists committed to expanding participation in, and access to, the global economy. Its community is united around core beliefs in the inherent worth and equality of every individual, the right to personal privacy, and open and public collaboration. These beliefs are reflected in what the community is building: a public utility to connect everyone to the global economy.
The Worldcoin Foundation (www.worldcoin.foundation) is the protocol’s steward and will support and grow the Worldcoin community until it becomes self-sufficient. Tools for Humanity (www.toolsforhumanity.com) is a global hardware and software development company. It helped launch Worldcoin and continues to provide support to the Foundation, in addition to operating the World App.
This opportunity would be with Tools for Humanity.
About the Orb
Worldcoin's launch requires a "Proof-of-Personhood": a way to determine someone is human (not a bot) and hasn't already claimed their free share of Worldcoin. This is why we developed the Orb.
The Orb is an advanced biometric imaging device, custom-designed for Worldcoin's launch. Orbs are deployed to a global network of operators, who use the device to onboard new Worldcoin users. During this onboarding, the Orb generates an encoding of each user's iris and submits it to Worldcoin's backend. For more details on how the Orb is part of Worldcoin's privacy-preserving approach to Proof-of-Personhood, see the Worldcoin whitepaper.
The Orb solves a fierce combination of engineering and UX challenges, centered around image quality, security, and ease-of-use. Each device has an advanced iris imaging system, designed to work consistently across real-world lighting conditions. An additional suite of sensors feeds into an onboard fraud detection system, enabling use in insecure environments. These systems are combined in a sleek industrial design with a simple, minimalist user interface.
About the Team
For Worldcoin to launch successfully on a global scale, we need to both ensure fairness and build trust with our users. Therefore, it is essential to prevent fraud, protect privacy, and ensure availability.
Beyond regular company security the goal of security at Worldcoin is to deploy an edge device to unsecured environments. We consider a wide range of threats that span tampering with the device, spoofing the device as well as backend attacks. The cross-disciplinary nature of this team requires interfacing with various other teams across the company including Economics, AI, Backend and Orb Software. We are a small security team and you will have a huge impact!
About the Opportunity
- Engineer and manage solutions to bolster our security incident detection and response capabilities.
- Engage in proactive threat assessments and purple team activities
- Develop and maintain a robust detection as code SIEM strategy
- Perform security audits on business applications and in-house systems to identify visibility gaps and advanced custom detection signals
- Provide valuable insights into the organization's security posture
About You
- Expert-level proficiency with SIEM solutions, capable of architecting monitoring dashboards and fine-tuning alerting systems for low-noise, high-impact incident detection.
- Expert experience threat modeling and threat hunting to proactively advance the organization’s security posture
- Ability to write and maintain detection as code and develop complex, high fidelity custom detection signals
- Proficient in creating and executing security audits on business applications and internal systems, with the ability to drive actionable improvements based on audit findings.
- A strong advocate for security awareness, capable of designing and leading internal programs to elevate organizational security consciousness.
- 7+ years of hands-on experience in Detection Engineering or closely related roles.
Nice To Have:
- Previous experience in leading purple team initiatives or incident response simulations.
- Demonstrable scripting skills in languages like Python, Bash, or Go to automate tasks and develop custom tooling.
- Experience in leading or mentoring less experienced team members in the realm of security operations.
- Experience with regulatory compliance standards such as SOC 2, ISO 27001 or GDPR.
- A portfolio of public talks, blogs, or research papers on relevant security topics is a plus.
By submitting your application, you consent to the processing and internal sharing of your CV within the company, in compliance with the GDPR.
Pay transparency statement (for CA and NY based roles):
The reasonably estimated salary for this role at TFH ranges from $272,000-$310,000 plus a competitive long term incentive package. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, TFH offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, vision, 401(k) plan and match, life insurance, flexible time off, commuter benefits, professional development stipend and much more!