Senior Security Engineer, Product

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of product and protocol security for Jito's offerings.

• Execute threat modeling, secure design evaluations, whitebox code assessments, and vulnerability testing.

• Ensure security considerations are integrated early to impact product designs positively.

• Strengthen deployments across product lines, including the jito-solana deployment procedure.

• Perform continuous internal audits of products.

• Develop on-chain monitoring tools and detection mechanisms to identify probing activities prior to attacks.

• Oversee bug bounty operations, encompassing triage, severity evaluation, remediation tracking, and escalation.

• Navigate auditor findings through review, prioritization, assignment, tracking, and resolution.

• Conduct AI-assisted security assessments and ongoing scanning.

• Mitigate security risks posed by agents and AI tools operating within codebases.

• Manage risks associated with keys and assets, including key hygiene, hot wallets, engineering keys, multisig setups, and security councils.

• Report to the Head of Security while collaborating with the Enterprise Security Engineer.

⛳️ Requirements

• Minimum of 5 years of professional experience, with significant software engineering experience prior to transitioning into security.

• Background in software engineering with experience in developing production systems.

• Experience in product or application security.

• Proficiency in at least one systems or backend programming language; Rust is preferred, with Go, C++, or Python also acceptable.

• Familiarity with reading production codebases and creating tooling.

• Experience in developing security tools or automation from the ground up.

• Involvement in or a solid understanding of managing a bug bounty program.

• A genuine interest in AI security, particularly in adversarial testing of agent controls.

• Excellent written communication skills.

• Capability to work independently with a high level of ownership within a small team.

• Experience in web3, crypto, or DeFi environments.

• Preferred experience in smart contract or on-chain security.

• Familiarity with Hypernative or Blockaid is advantageous.

• Understanding of validator or consensus infrastructure is preferred.

• Experience with multisig schemes is preferred.

• Knowledge of hardware security modules is beneficial.

• Exposure to trusted execution environments is a plus.

• Experience with fuzzing, formal verification, or property-based testing of financial logic is preferred.

🏝️ Benefits

• Token incentives.

• Equity opportunities.

• Competitive salary packages.

• Necessary tools to excel in your role.

• Remote-first work environment.

• Commitment to equal opportunity employment.