Security Engineer

Job description

Asymmetric Research: Asymmetric Research is a specialized security firm focused on long-term, integrated partnerships with L1/L2 blockchains and DeFi protocols. We help teams build resilient systems, strengthen security posture, and proactively address emerging threats. About the Role: We are seeking a Security Engineer to review and secure leading blockchain protocols and web3 projects. You will partner with clients to harden their products through design feedback, deep manual analysis, and automated tooling (fuzzing, static analysis). Culture: AR is a fully remote organization and members of our team have been strongly committed to open-source values for decades, having worked at organizations with deep open-source roots and strong security programs including Google, Netflix, Mozilla, Stripe, and Jump Crypto. We pride ourselves on maintaining the highest levels of confidentiality, trust, and professionalism. Responsibilities: - Design and implement security and defense-in-depth controls to prevent and limit vulnerabilities. - Perform cutting-edge security research in popular blockchains and smart contract platforms. - Develop security tooling and developer workflows to aid in the early detection of vulnerabilities. - Collaborate with core contributors to conduct internal security audits. - Shepherd external security audits with the help of leading third-party audit firms. - Operate bug bounty programs on Immunefi, including leading, monitoring, and triaging submissions. - Work in a diverse, decentralized team environment with web3 professionals. - Clearly communicate security risks, findings, and proposed solutions. - Adhere to the highest standards of integrity, trust, and professionalism. Requirements: - Strong desire to understand how things work, with the ability to quickly absorb new information. - Prior experience with code reviews, reverse engineering, fuzzing and/or binary exploitation. - Willingness and aptitude to learn different web3 technology stacks written in Rust, Golang or C. - Prior high ranking on bug bounty leaderboards, code audit contests, or CTF competitions. [Nice to have] Benefits: - 25 days of paid vacation - Office and equipment stipend - Pension / 401K programs - Life insurance - Premium healthcare - Competitive base salary - Lucrative bonus programs