Security Chain Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct internal security audits for Injective's Cosmos-SDK modules, which include the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment.

• Evaluate and audit EVM smart contracts, EVM integrations, cross-chain bridge, and IBC components.

• Collaborate with senior protocol engineers to assess technical and economic risks associated with new chain features.

• Develop, maintain, test, and enhance core chain components such as consensus, state management, and financial infrastructure.

• Address vulnerabilities directly within the codebase.

• Create security tools including fuzzers, invariant and property-based tests, static analysis, as well as on-chain monitoring and alerting.

• Examine chain upgrades and pull requests to ensure determinism, consensus safety, denial-of-service vulnerabilities, and state-machine correctness.

• Produce security reports and liaise with external auditors, bug bounty researchers, and partners regarding findings and disclosures.

• Engage in incident response efforts, leading post-mortems and remediation activities.

• Investigate blockchain exploits and security advancements, sharing insights with the broader team.

⛳️ Requirements

• At least 3 years of experience as a Blockchain Engineer, with a strong emphasis on security.

• 5+ years of experience in software security.

• Practical experience in auditing (either internally or externally) DeFi protocols or blockchain core code, with specific findings to discuss.

• Proficient understanding of Golang and/or Solidity.

• Strong familiarity with Go idioms, libraries, and concurrent processing.

• Awareness of common security pitfalls in Go and Cosmos-SDK chains, such as non-determinism, panics, unbounded iteration, gas, and DoS issues.

• Comprehensive knowledge of blockchain, DeFi, and DEX concepts, consensus mechanisms, and the CosmWasm contract platform.

• Adequate understanding of cryptographic primitives, including digital signatures and the hash algorithms utilized by Ethereum and Cosmos.

• Ability to compose clear security reports and articulate risks to both technical and non-technical team members.

• Nice to have: a history of involvement in bug bounties, CTFs, published audits, or CVEs.

• Nice to have: experience with fuzzing and formal verification tools.

• Nice to have: prior experience in trading or at an exchange.

• Nice to have: familiarity with financial instruments and markets.

🏝️ Benefits

• Competitive salary and INJ token award.

• Remote-friendly work environment with flexible working hours.

• Unlimited paid time off (PTO).

• Equipment provided.

• Home Office Stipend.

• Opportunity to engage with cutting-edge blockchain technology in the finance sector.

• Collaborative team culture with opportunities for professional growth and development.

• Global team meetups.