Senior Security Engineer

We are working with a market-leading blockchain security firm, backed by top-tier investors. To date, they have partnered with numerous enterprise clients and some of the most prominent names in Web3.

The Role

This is a full-time technical security role sitting at the intersection of application security and blockchain. You'll lead security assessments, penetration tests, and code reviews across web, mobile, and cloud environments — with a strong focus on Web3 applications. Alongside client work, you'll have scope to contribute to R&D, publish research, and help raise the bar for blockchain security standards.

Responsibilities

• Security assessments across web, mobile, thick client applications, and browser extensions
• External and internal network penetration testing
• Security source code reviews
• Cloud security reviews (AWS, Azure, GCP)
• Comprehensive pentest reporting for technical and non-technical audiences
• Research and development of novel pentesting techniques in the blockchain space
• Community contributions via tooling, blog posts, and presentations

Requirements

• 4+ years in application security and penetration testing
• Strong source code review skills, particularly JavaScript and TypeScript
• Familiarity with cloud and mobile platform security risks
• Scripting proficiency in Python and/or Bash
• BS/MS/PhD in Computer Science or similar
• Strong written and verbal communication

Bonus

• Web3 pentesting experience (exchanges, wallets, DApps, custody solutions)
• Smart contract audit experience
• Browser extension security knowledge
• Bug bounty or audit contest participation
• Published research or conference speaking credits