About the Role
You will own product and protocol security across multiple products. You will conduct threat modeling, secure design reviews, whitebox code reviews, vulnerability testing, deployment hardening, and internal audits. You will build onchain monitoring and security tooling, manage bug bounty operations, drive audit findings to closure, and address key and asset risks. You will also support AI-assisted testing, continuous scanning, and security for AI tooling in codebases.
Requirements
•Software engineering background and experience building production systems
•Product security expertise across threat modeling, secure design review, whitebox code review, and vulnerability testing
•5+ years of professional experience, including meaningful software engineering experience
•Proficiency in Rust, Go, C++, or Python
•Product or application security experience
•Experience building security tooling or automation
•Experience with bug bounty programs or knowledge of how to operate one
•Interest in AI security and adversarial testing of agent controls
•Written communication skills
•Web3, crypto, or DeFi experience
Responsibilities
•Conduct product and protocol security reviews, including threat modeling, secure design reviews, and whitebox code reviews
•Harden deployments across product lines, including the jito-solana deployment process
•Perform ongoing internal audits of products
•Implement onchain monitoring tooling and detections
•Operate bug bounty processes, including triage, severity assessment, remediation tracking, and escalation
•Drive auditor findings through review, prioritization, assignment, tracking, and closure
•Perform AI-assisted security testing and continuous scanning
•Secure AI agents and tooling operating in codebases
•Manage high-impact key and asset risks, including key hygiene, hot wallets, engineering keys, multisigs, and security councils
Benefits
•Equity
•Token incentives
•Tools needed to perform the work
