Product Security Engineer, Assessments

Job Description

• You will prioritize and perform pen testing including, but not limited to the following: - web applications and apis - Web3 (ex: DApp, NFTs etc) - Cloud infrastructures (AWS) - Mobile applications and apis • As a member of the security assessment team, you will be responsible for Threat Modeling of applications, systems, and/or services • You will be responsible for supporting the development of processes and procedures to ensure cross-functional SLA’s are exceeded • You will review and analyze existing code bases to uncover vulnerabilities, and provide teams with recommended fixes • As a member of the security assessment team, you will assist in the development of frameworks and automated tools to be leveraged during assessments • Collaborate with trusted partners to support scoping assessments, environment setup/configuration, project management, troubleshooting, and vulnerability remediation testing • You will be responsible for triaging and support of the public Bug Bounty program. This will include, but is not limited to: tiered support, documentation, stakeholder management, risk ranking, on-call rotation, and researcher feedback • Pick up other duties as assigned

Qualifications

• 2+ years of programming experience or ability in one of our core languages • Fluency in a risk and threat modeling methodology • Mobile or Web Application Security experience • Experience in the automation of manual processes • Ability to understand and solve complex problems • Strong written and verbal communication skills, specifically on security topics • Some personal or professional experience with exploitation/auditing in the Web3/crypto space

Benefits

• target bonus + target equity + benefits (including medical, dental, vision and 401(k))