Web3 Security Engineer

Job description

ABOUT SKY MAVIS Sky Mavis is building the future of gaming. We’re the creators of Axie Infinity, the most successful Web3 game ever, and Ronin, a purpose-built blockchain that ranked as the 4th most-used chain in 2024, behind Ethereum, Bitcoin, and Solana. We’ve processed over $4.3 billion in on-chain volume and are backed by more than $170 million from top-tier investors, including a16z, Accel, Libertus Capital, and Paradigm. Our team moves fast, builds with intention, and believes in a world where players truly own what they earn. If you’re excited by open economies, massive scale, and shaping new digital frontiers, join us. ABOUT THE ROLE The Security team drives Web2 and Web3 security for all of Sky Mavis games and digital assets, including the Ronin blockchain network, Ronin wallet, and more. With experience spanning many blockchain startups as well as recognized companies (Coinbase, Circle, JP Morgan Chase, Microsoft, Amazon, etc), the security team is building strong security policies and SDLC processes internally. The Web3 Security Engineer is responsible for the security of smart contracts developed by the engineering team. This individual will be embedded with the engineering team to drive security best practices and ensure the bulletproof safety of smart contracts deployed. The security engineer will perform threat modeling, running scanning tools, audit the code base, work closely with engineering to resolve security vulnerabilities, and ensure the secure deployment of smart contracts. Sky Mavis is fast adopting GenAI solutions to 100x our engineers. The security engineer will have the opportunity to learn and leverage AI to enhance and automate their workstream to improve our security best practices. This role is based in Ho Chi Minh City, Vietnam. WHAT YOU’LL DO - Security assessments: Perform internal and external assessments of products (games, wallet, etc) to ensure the highest level of security before launch, including conducting threat modeling, tabletop exercises, and code reviews. Put on your white hat and go hunt for security vulnerabilities. - Monitoring: Ensure smart contracts generate sufficient events to monitor. Leverage blockchain monitoring platform to continuously monitor smart contracts. - Incident response: Maintain and update a runbook of procedures for handling and escalating security incidents. Participate in the incident response process to address and resolve smart contract incidents. - Evaluate new technology: Identify and evaluate new security technologies/tooling to adopt internally to continuously improve Sky Mavis’ security best practices. - Drive impact: Identify security gaps and drive positive change to improve Sky Mavis’ security posture. - Cross-functional collaboration: Collaborate with the engineering team to identify security gaps in smart contract architecture. Works well with others and is highly responsive. WHAT WE LOOK FOR - Education: Bachelor or master degree in computer science or related field. - Experience: 2+ years in software engineering. Audited smart contracts. - Programming Languages: Strong knowledge of Solidity. - Skills/Knowledge: Hands-on expertise with blockchain and smart contract security. Able to audit Solidity code. Familiarity with blockchain monitoring solutions. - Attitude: Bias for action, driven to learn, top talent. - Strong communicator and active listener: Clear communication (English) and capable of building trust across diverse teams. - Problem-Solving: Strong analytical and problem-solving skills to identify and resolve security issues. - Bonus: Gamer, active crypto user, does hackathons on weekends. Nice to Have: - Python scripting. - Experience using LLMs.