Remote job
Information Security Engineer, Product
Job details
About this role
Role overview
Help secure core infrastructure and products in a blockchain and web3 environment. This product security role combines vulnerability research with practical engineering: identifying weaknesses, building defenses, advising developers, and responding to vulnerability reports.
Responsibilities
- Assess security issues through design reviews, code audits, and penetration testing. - Build security tools and develop mitigations, frameworks, and hardening measures to prevent or detect vulnerabilities. - Review operational practices and guide engineers on secure development and operations. - Triage and respond to reports submitted through bug bounty programs.
Requirements
- Bachelor’s or master’s degree in computer science or a related technical field, or equivalent experience. - At least three years of vulnerability research and exploitation experience. - Experience with native development and common vulnerability patterns, including in languages such as Rust or C. - Familiarity with automated security analysis methods and tools, such as fuzzing and static analysis.
Nice to have
- Contributions to the security community, such as public research, writing, or conference talks. - Experience with virtual machines or complex runtime environments, such as MoveVM, EVM, WASM, or LLVM-based runtimes, and their security models.