Security Engineer
About the Role
You will identify and reduce security risks across blockchain and web3 products. You will perform threat modelling, security testing (SAST, DAST, fuzzing, symbolic execution, property-based testing), and lead red/blue team exercises. You will review code, implement fixes, build security tooling, and work with stakeholders to improve secure development practices. You will analyze and mitigate cybersecurity threats and apply security controls to Rust and TypeScript codebases and related infrastructure.
Requirements
- Strong knowledge of secure coding practices
- Risk based and pragmatic approach to security
- Familiarity with SAST, DAST, fuzzing, property-based testing, and symbolic execution
- Experience with threat modelling and red/blue teaming
- Experience working with external security teams and deploying fixes
- Ability to influence diverse stakeholders
- Advanced skills in analyzing and mitigating cyber security threats
- Understanding of web3 architecture including cryptography, decentralized networking, blockchain consensus, and hardware key management
- Proficiency with security tools and ability to build custom tools
- Proficiency in multiple programming languages, ideally Rust and TypeScript
- Preferably located within two hours of UTC+0 (preferred not required)
Responsibilities
- Identify and reduce security risks
- Perform threat modelling
- Conduct SAST, DAST, fuzzing, symbolic execution, and property-based testing
- Lead red teaming and blue teaming activities
- Integrate external security findings and implement fixes
- Collaborate with stakeholders to influence secure practices
- Develop security tools and automation
- Perform secure code reviews and remediation
- Analyze and mitigate cybersecurity threats
- Secure web3 application architecture including cryptography and consensus
Benefits
- Competitive remuneration package
- Token allocation where legally possible
- Remote-first working environment
- Flexible working hours
- Team and company-wide retreats
- Work laptop
- Health care (for employees in Germany, Portugal, Switzerland, and the U.K.)
- Parental leave (for employees in Germany, Portugal, Switzerland, and the U.K.)
- Paid time off 28 days per year (for employees in Germany, Portugal, Switzerland, and the U.K.)
- Local team events (for employees in Germany, Portugal, Switzerland, and the U.K.)
- Language classes (for employees in Germany, Portugal, Switzerland, and the U.K.)