Senior Offensive Security Engineer, Rust, Peer to Peer

This is a fully remote position, open to applicants in United States.

📋 Description

• Integrate into the engineering team to design and develop secure features throughout the software development lifecycle.

• Engage in architecture and design evaluations, pinpointing security vulnerabilities early and collaborating with engineers to create practical, scalable solutions.

• Produce production-quality code in Rust and other necessary languages to implement security-critical functionalities.

• Create and implement secure communication patterns, authentication methods, and cryptographic services for decentralized systems.

• Analyze new product features for security considerations and suggest design enhancements prior to implementation.

• Conduct security-focused code reviews, emphasizing exploitability, resilience, and secure implementation practices.

• Lead efforts to remediate vulnerabilities identified through internal testing, penetration testing, or external assessments.

• Collaborate with engineering teams to prioritize security enhancements while maintaining a balance with performance, usability, and product requirements.

• Design, implement, and enhance security controls for peer-to-peer networking, distributed protocols, edge AI workloads, and device-to-device communications.

• Act as the dedicated security engineering partner for the IDN team, shaping architecture, implementation, and vulnerability remediation strategies across the platform.

• Facilitate threat modeling exercises for new platform features, distributed protocols, network services, and architectural modifications.

• Evaluate security implications related to peer discovery, node identity, trust establishment, relay services, NAT traversal, encrypted communications, and distributed trust models.

• Assess platform resilience against malicious nodes, protocol misuse, unauthorized access, data manipulation, and other adversarial behaviors typical in decentralized systems.

• Collaborate with architects and engineering leadership to identify and mitigate security risks during the architecture and design phases before implementation starts.

⛳️ Requirements

• Over 8 years of experience in software engineering, application security, product security, or secure systems engineering.

• Software engineering expertise in Rust, including the development of production systems.

• Practical experience in conducting security-focused code reviews and vulnerability assessments.

• Experience working closely with engineering teams and directly contributing to software design and implementation.

• In-depth knowledge of secure software development practices and secure-by-design principles.

• Experience in performing architecture reviews and translating security requirements into engineering solutions.

• Strong understanding of distributed systems architecture, peer-to-peer networking concepts, trust models, identity systems, secure communications, and modern application architectures.

• Experience in implementing or integrating authentication/authorization systems, cryptographic libraries & protocols, secure communications, key management, and identity & trust services.

• Proven ability to collaborate effectively with software engineers to deliver secure, maintainable solutions.

🏝️ Benefits

• Competitive salary

• Comprehensive health, dental, and vision benefits package

• 401(k) match

• Equity options

• $200/month Health & Wellness stipend

• Continuing Education support

• $500/year Function Health subscription

• Free parking for in-office employees

• Flexible Time Off (FTO)

• Parental leave for eligible employees

• Supplemental life insurance