Tech Lead, Hexagate

About the role

The role owns the end-to-end technical strategy for the Hexagate detection and response platform, setting the vision for core product areas such as pipelines, the detection engine, and LLM systems. You will architect and deliver high-throughput, low-latency real-time processing capabilities that power multi-chain threat intelligence and automated protection. You will define and enforce the architectural guardrails that ensure reliability, scalability, and operational excellence across a globally distributed production environment. You will mentor and unblock a team of engineers, driving design reviews that balance innovation with pragmatic trade-offs in a fast-moving security context. You will collaborate closely with data science and product teams to translate evolving threat models into robust, production-ready detection capabilities. You will own the full lifecycle of critical features, from initial design and implementation through to on-call responsibilities and continuous improvement. You will ensure that the platform not only meets current security demands but is also extensible for future adversarial techniques and regulatory requirements.

Key facts

What you'll do

• Provide technical leadership for a core area of the platform, owning architecture, roadmap execution, and the highest standards of technical quality.
• Design and deliver high-throughput, low-latency real-time ingestion, normalization, enrichment, and routing pipelines for multi-chain on-chain activity.
• Evolve the detection platform across a multi-language detection DSL, statistical and anomaly models, machine learning models, and integrated threat intelligence.
• Define and implement standards for reliability, observability, and production health, driving incident learnings and performance improvements.
• Mentor engineers, run rigorous design reviews, unblock delivery, and elevate the quality bar across the team.
• Partner with data science and product to operationalize AI-driven threat detection and turn experimental capabilities into hardened platform features.
• Own the end-to-end delivery of features, ensuring that new capabilities are performant, secure, and reliable in production at scale.
• Collaborate with security researchers to model adversarial behaviors and ensure the platform can respond to emerging threats in real time.
• Contribute to the broader engineering culture of craftsmanship, ownership, and continuous learning across the Hexagate organization.
• Represent the platform in cross-team discussions, ensuring alignment with company-wide goals for trust, safety, and scalability.

Requirements

• Staff level backend engineering with a track record of leading technical decisions in production systems.
• Deep distributed systems expertise, including reliability, latency, concurrency, backpressure, and idempotency in high-scale environments.
• Strong API design and data modeling skills, with fluency in both relational and event-driven paradigms.
• Demonstrated ability to lead through influence with clear communication, strong judgment, and pragmatic trade-offs.
• High ownership, driving execution end-to-end and maintaining system health in production under demanding conditions.
• Proven experience building and operating platform capabilities that are consumed by other engineers.
• Comfort working in an adversarial domain where security, fraud, and risk considerations are central to product decisions.
• Commitment to operational excellence, including observability, monitoring, and a structured approach to incident response and learning.

Nice to have

• Web3 or blockchain development experience or a strong interest in the space.
• Real-time or streaming data engineering background with large-scale pipeline experience.
• Experience in security, fraud, risk, or other adversarial-domain problem spaces.
• Hands-on experience building platform products used by multiple engineering teams.

Technologies we use

• Languages: Python, Rust, Go
• Infra: Kubernetes, AWS, Grafana, Pulumi
• Streaming & Messaging: NATS
• Data stores: PostgreSQL, Redis, S3

AI at Chainalysis

AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.

You belong here.

At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We're ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.

We encourage applicants across any race, ethnicity, gender/gender expression, age, spiritual