Product Security Engineer

Responsibilities

• Conduct end-to-end security assessments of blockchain systems, smart contracts, nodes, APIs, and infrastructure
• Perform hands-on vulnerability discovery, adversarial testing, and proof-of-concept exploit development
• Own threat modeling and security architecture reviews across product phases
• Define security gates before new components reach production
• Build security tooling, fuzzing infrastructure, and CI/CD security automation
• Partner with engineering teams to prioritize and remediate cryptographic and protocol risks

Requirements

• Experience finding real vulnerabilities through manual testing
• Strong threat modeling and security architecture review skills
• Applied cryptography knowledge, including BLS signatures and pairing-based schemes
• Experience assessing cross-chain protocols or threshold signature systems
• Ability to read and audit Rust and/or Java cryptographic code
• Understanding of memory safety, constant-time correctness, and secret handling

Preferred Qualifications

• Experience with grammar-aware fuzzing for gRPC, JSON-RPC, or protocol endpoints
• Experience building classifier pipelines for security triage
• Prior work on Ethereum consensus client security
• Experience building security automation tooling
• Experience integrating AI-assisted workflows into security review