Security Chain Engineer

This is a fully remote position, open to applicants in New York.

📋 Description

• Conduct internal security audits for Injective's Cosmos-SDK modules, which include the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment.

• Assess and review EVM smart contracts, EVM integrations, as well as cross-chain bridge and IBC components.

• Collaborate with senior protocol engineers to identify and model technical and economic risks associated with new chain features.

• Develop, maintain, and test robust core chain components, encompassing consensus, state management, and financial infrastructure.

• Address vulnerabilities directly within the codebase.

• Create security tools such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting systems.

• Evaluate chain upgrades and pull requests for determinism, consensus safety, denial-of-service vulnerabilities, and state-machine accuracy.

• Compose internal and public security reports.

• Coordinate with external auditors, bug bounty researchers, and partners regarding findings and disclosures.

• Engage in incident response and lead post-mortem analyses and remediation efforts.

• Investigate blockchain exploits and security advancements, sharing insights with the broader team.

⛳️ Requirements

• At least 3 years of experience as a Blockchain Engineer, with a strong emphasis on security.

• Over 5 years of experience in software security.

• Practical experience in auditing DeFi protocols or blockchain core code, either internally or externally, with demonstrable findings.

• Proficient understanding of Golang and/or Solidity.

• Strong grasp of Go idioms, libraries, and parallel processing techniques.

• Familiarity with security vulnerabilities typical in Go and Cosmos-SDK chains, such as non-determinism, panics, unbounded iteration, gas issues, and denial-of-service threats.

• Comprehensive knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, and the CosmWasm contract platform.

• Solid comprehension of cryptographic primitives, including digital signatures and hash algorithms utilized by Ethereum and Cosmos.

• Capability to produce clear security reports and articulate risks to both technical and non-technical team members.

• Proven track record in bug bounties, CTFs, or published audits and CVEs (preferred).

• Experience with fuzzing and formal verification tools (preferred).

• Previous experience in trading or at an exchange (preferred).

• Knowledge of financial instruments and markets (preferred).

🏝️ Benefits

• Competitive salary and INJ token award.

• Remote-friendly work environment with flexible hours.

• Unlimited paid time off (PTO).

• Equipment provided.

• Home Office Stipend available.

• Opportunity to work with cutting-edge blockchain technology in the finance sector.

• Collaborative team culture with chances for professional growth and development.

• Global team meetups.