Remote Security Engineer

Summary

Join Agoric as a Security Engineer and be an integral part of ensuring our smart contracts platform is secure from attack and disruption. You will guide the company to identify and resolve potential security risks, build upon our company’s strong security culture, and work with a team of world-class computer security and programming language developers.

Requirements

• BA, BS, MS, PhD in Computer Science, Software Engineering, or other relevant discipline, or equivalent professional experience
• 6+ years of experience as a security engineer in challenging environments (high profile / high stakes companies)
• Familiarity with blockchain, cryptography, and smart contract languages and frameworks
• Experience working with systems design and open-source projects

Responsibilities

• Develop our static analysis and fuzzing programs, with opportunities to build custom tooling to support bug hunting and QA
• Guide penetration testing program for application security, including supporting security audits
• Perform adversarial testing on frameworks, contracts, core infrastructure, and testnets
• Support our vulnerability disclosure and bug bounty program
• Guide our dependency management program, and maintenance of Agoric’s Software Bill of Materials
• Improve, develop, and maintain security documentation including threat models and user interaction diagrams of the Agoric stack
• Support ecosystem security by partnering with various ecosystem stakeholders (e.g. wallets, Dapp developers, inter-chain providers) for audit readiness, emergency coordination, and observability efforts
• Aid the team in incorporating security into our software designs and implementations as a first class goal
• Participate in team code reviews and threat modeling with fellow engineers, with a keen eye towards information security concerns
• Help improve the stability, scalability, reliability, and maintainability of the Agoric platform through the construction of tools and testing frameworks, integration of open source software, and helping to develop response playbooks and best practices
• Understand the security trends and challenges within the company and in the blockchain / DeFi industries at large. Offer ideas and collaborative solutions to others at Agoric and in the ecosystem
• Participate in open source development on shared resources with external development teams

Preferred Qualifications

• Have previous experience at a fast paced, high growth stage internet/software company
• Experience with Javascript & Go
• Experience with Cosmos/Tendermint