Lead Security Engineer (Web3)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Lead Security Engineer (Web3): Securing enterprise onchain financial infrastructure across smart contract protocols, DeFi integrations, cloud platforms, and public APIs/SDKs with an accent on smart contract, cloud, and operational security. Focus on threat modeling, detecting real-time financial exploits, automating emergency controls across multiple chains, and strengthening incident response and human security practices.
Location: On-site in New York City with regular in-person collaboration required
Company
Enterprise infrastructure is built for trusted onchain financial products, combining transparent digital asset technology with financial use cases for large global enterprises.
What you will do
- Audit AWS and Azure cloud security, including key management, network security, monitoring, and operational controls.
- Create threat models for first-party and third-party software, research vulnerabilities, and implement remediations.
- Build reusable security tooling, standard operating procedures, and incident response manuals.
- Conduct incident response training and simulate hacks, alerts, and social engineering attacks.
- Audit smart contract protocols and establish secure development and maintenance practices with the Smart Contract team.
- Develop full-stack tools to detect malicious mempool transactions, identify invariant violations in real time, and automate smart contract pauses across multiple chains.
Requirements
- Deep knowledge of cloud infrastructure and Web2 security practices.
- Strong understanding of cybersecurity standards and social engineering defenses.
- Experience building full-stack applications and security tooling.
- Deep knowledge of EVM security tooling, testing, and best practices.
- Deep understanding of common hacks and financial attack vectors in DeFi protocols.
- Experience with CTFs, bug bounties, or white-hat security activities.
Culture & Benefits
- Work on crypto infrastructure designed to bring DeFi and digital assets to mainstream financial use cases.
- Contribute to projects affecting the global financial landscape.
- Access continuous learning and professional development opportunities.
- Receive competitive compensation and ownership participation with comprehensive benefits.
- Join a fast-paced, agile, heavily in-person environment that values effective collaboration.
Hiring process
- Applications are reviewed, and selected candidates are contacted for follow-up.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →