Staff Product Security Engineer (Security)

Role overview This is a staff-level product security role on a fully remote team supporting a self-custodial crypto wallet used by millions of people across multiple blockchains. The position centers on offensive security: finding and exploiting vulnerabilities, hardening code and infrastructure, and embedding security practices throughout product development. The work spans cryptography, application security, and incident response for a high-traffic consumer finance product.

Responsibilities - Run recurring security assessments across new projects, infrastructure, and application code - Identify and mitigate vulnerabilities in code, systems, and networks using manual testing, automated tooling, threat modeling, and threat intelligence - Track emerging offensive techniques, application security threats, and blockchain-specific risks, then recommend posture improvements - Produce detailed written reports for management and engineering teams, and translate findings into preventive action - Partner with development teams to adopt secure coding patterns and protect the integrity of wallet-side cryptographic functions - Participate in incident response activities and lead large, cross-functional security initiatives

Requirements - 7+ years of hands-on experience with offensive security techniques, with specific focus on blockchain technology and cryptography - Strong working knowledge of web and mobile application security risks, vulnerabilities, and exploitation paths - Proficiency in JavaScript and TypeScript code review, paired with knowledge of common application security threats - Ability to write proof-of-concept exploits and validate that remediation code meets repository standards - Sharp analytical and problem-solving skills applied to complex, high-stakes systems - Clear verbal and written communication skills for both technical and leadership audiences

Benefits and work setup - Target base salary range of $200,000 to $250,000, plus equity and benefits - Fully remote with flexible hours and a supportive remote culture - Comprehensive medical, dental, and vision insurance fully covered for employees - Home office setup stipend, monthly wellness benefit, and weekly meal benefit - Unlimited vacation policy and a 401(k) retirement plan - Global team off-sites and an inclusive hiring commitment that welcomes diverse backgrounds

Nice to have - Prior experience securing consumer-scale crypto wallets or other financial applications - Familiarity with multi-chain ecosystems and the specific threat landscape of public blockchains - Track record of leading incident response efforts or coordinating disclosures across teams