Security Engineer

Job Description

• Identify and mitigate security vulnerabilities in code, systems and networks through manual review, automated tools and threat modeling. • Responsible for the configuration and tuning of application security tooling, process and alerting. • Responding to and validating Bug Bounty submissions. • Keep up to date with the latest offensive security techniques, application security threats, and best practices, including recommending improvements to security posture • Write detailed reports of your findings and present them to management and technical teams, and help to prevent real-world attacks. • Work with development teams to implement secure coding practices. • Collaborate with other teams such as development, operations, and compliance to ensure that security is integrated throughout the organization. • Participate in incident response and incident management activities.

Qualifications

• 3+ years of experience in offensive security techniques, with a focus on blockchain technology. • Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications. • Proficient in code review for Typescript and JavaScript with a strong understanding of application security threats. • Write PoC’s to prove vulnerabilities, review and ensure that patch code meets the standards set by the repository owners and maintainers. • Strong analytical and problem-solving skills. • Good verbal and written communication skills.

Benefits

• Competitive salary and equity. • Comprehensive insurance (medical/dental/vision) — 100% covered. • Stipend for your ideal remote / WFH set-up: laptop, headphones, and any other work gear you may need. • Flexible hours and a long-standing, supportive remote environment. • Unlimited vacation: Take time when you need it (and we really mean it). • 401(k) retirement plan (although we are not matching at this time) • Wellness benefit • Daily lunch benefit