Senior Security Engineer (Web3)

Location: Remote in the United States or Canada

Salary: $165,000–$225,000 USD per year

Company

Building foundational blockchain infrastructure and decentralized protocols to accelerate adoption of the internet of value.

What you will do

• Monitor the Sui DeFi ecosystem for security and economic risks, including oracle issues, bad debt, solvency exposure, liquidation capacity, and accounting inconsistencies.
• Build and extend static analysis, monitoring, and agent-based security tooling.
• Assess supported protocols against DeFi security recommendations, validate security claims against on-chain data, and track remediation commitments.
• Hunt critical vulnerabilities through full-package audits, variant analysis, upgrade-payload reviews, and post-incident forensics.
• Coordinate due diligence, incidents, and post-mortems with external DeFi teams and internal products such as DeepBook.
• Write actionable findings, reports, and runbooks for technical and non-technical stakeholders.

Requirements

• 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering, including production tools and real vulnerability findings.
• Bachelor’s degree in Computer Science, Computer Engineering, or a related technical field, or equivalent practical experience.
• Strong knowledge of DeFi mechanics and failure modes across lending markets, AMMs, perpetuals, liquid staking, oracles, flash loans, and MEV.
• Proficiency in TypeScript and Python, working knowledge of Rust, and ability to write SQL over large datasets.
• Experience reading smart contract source code, bytecode, or disassembly; Solidity or Rust smart contract experience is transferable.
• Strong written and verbal communication skills and required interest in Web3.

Nice to have

• Sui and Move experience, including package upgrades, programmable transaction blocks, and Sui GraphQL or gRPC APIs.
• Experience with LLM-agent security tooling, static or dynamic program analysis, fuzzing, symbolic execution, or formal verification.
• Quantitative or economic modeling experience involving stress testing, liquidity modeling, or lending-market risk parameters.
• Publications, conference talks, CVEs, or strong bug bounty rankings.

Culture & Benefits

• Remote-first work environment.
• US benefits include health, dental, and vision insurance, HSAs and FSAs, disability and life insurance, and a 401(k).
• 18 weeks of paid parental leave, flexible paid time off, and 11 paid holidays per year.
• Wellbeing, mental health, family planning, fitness, wellness, privacy protection, and traveler insurance programs.
• Token and equity compensation, including eligibility for annual refresh grants.
• Team offsites and an annual all-company retreat.