Application Security Engineer

Summary

The job is for an AppSec team member at Parity, a core blockchain infrastructure company founded by Dr. Gavin Wood. The role involves securing the ecosystem of Parity's products, which include blockchain clients, mobile apps, browser-based tools, and extensions. The ideal candidate should have strong knowledge of secure coding practices, familiarity with security frameworks, experience in threat modeling, red/blue teaming, and implementing security findings. They should also be proficient in multiple programming languages, ideally Rust and TypeScript. Benefits include competitive remuneration packages, a remote-first work environment, access to learning opportunities, team retreats, and health care, parental leave, PTO, local team events, yearly L&D budget, and language classes for employees in Germany, Portugal, and the U.K.

Requirements

• Strong knowledge of secure coding practices
• Risk based approach and pragmatism in order to enhance level of security in partnership with different stakeholders
• Familiarity with security frameworks and approaches such as SAST, DAST, fuzzing, property-based testing, symbolic execution, network simulation
• Experience in threat modeling, red/blue teaming, working with best in class independent security teams and turning their findings into actual deployed fixes in our codebase (as well as implementing lessons learned)
• An ability to work with a diverse set of stakeholders to valorise security and influence best practices
• Advanced skills in analysing and mitigating cyber security threats
• Understanding of web3 application architecture - ideally including cryptography, decentralised networking, blockchain consensus, hardware key management solutions
• Proficiency with security tools and technologies, also ability to create own tools when it is needed
• Proficiency in multiple programming languages - ideally RUST and Typescriypt

Responsibilities

• Recognize and reduce risk to the ecosystem
• Effectively influence a wide group of stakeholders

Preferred Qualifications

Ideally live within 2 hours of UTC+0, but exceptional candidates outside of this timezone will also be considered

Benefits

• Competitive remuneration packages based on iterative market research, including tokens (where legally possible)
• Future of work' environment that’s remote-first and self-initiating with flexible hours
• Team mates that are genuinely excited about their impact and projects
• Access to the brightest minds in this space to learn about Web3 and develop your skills and knowledge while on the job
• Becoming part of the wider ecosystem (career and networking opportunities)
• Team and company-wide retreats
• Work laptop
• For employees in Germany, Portugal, and the U.K., benefits such as health care, parental leave, PTO (28 days per year), local team events, yearly L&D budget, and language classes