Responsibilities:

  • Analyze and assess novel and recurring security issues through design reviews, code audits, and penetration tests.
  • Design and build security tools, and develop mitigations, frameworks, and hardening strategies for vulnerability prevention and detection.
  • Review and develop secure operational practices and provide security guidance for engineers.
  • Respond to and triage reports from bug bounty programs.

Requirements:

  • B.S. or M.S. in Computer Science, a related technical field, or equivalent experience.
  • 3+ years of experience in vulnerability research and exploitation.
  • Experience with native development practices and common vulnerability patterns, such as Rust and C.
  • Experience with automated security analysis tools and frameworks, including fuzzing and static analysis.

Nice to have:

  • Contributions to the security community, such as public research, blogging, or conference talks.
  • Experience with virtual machines or complex runtime environments such as MoveVM, EVM, WASM, or LLVM-based runtimes, including security models, sandboxing, and execution isolation.
  • Familiarity with smart contract programming languages, especially Move, security tools and frameworks, and formal verification.