Information Security Engineer, Product
atAptos
Jul 07
Aptos is a people-first blockchain on a mission to help billions of people achieve universal and fair access to decentralized assets in a safe and scalable way.
Founded by some of the original creators and maintainers that researched, designed, and built the Diem blockchain to serve this purpose, we have dedicated several years toward this mission. We believe the open-source Diem technology we have developed is an important foundation of a safe and scalable web3 world where everyone has more equitable opportunities to grow and access financial assets with lower fees and fewer intermediaries. Â
Aptos (Ohlone for "The People") encompasses our mission and ethos for why we build.
About the role:
As a Security Engineer at Aptos Labs, you will play a critical role in ensuring the security and integrity of the Aptos ecosystem. You will be responsible for proactively identifying and mitigating security risks in Aptos core infrastructure and Aptos Labs products and services by conducting design reviews, code audits, penetration tests, and overseeing bug bounty programs. Your expertise in vulnerability detection and prevention will be invaluable as you collaborate with developers to create and adopt security-focused tools and frameworks. You will also be a valuable resource for all our engineering teams, providing guidance and training on security best practices to help safeguard our ecosystem. You will have the opportunity to contribute to the security community and shape the future of the web3 landscape.
What you’ll be doing:Â
- Analyze and assess novel and recurring security issues via design reviews, code audits, penetration tests and bug bounty programs.
- Build and prototype security tools, exploit mitigations, frameworks and hardening strategies tailored for vulnerability detection and prevention.
- Review and develop secure operational practices, and provide security guidance for engineers and support staff.
What we’re looking for:
- B.S. or M.S. in Computer Science, a related technical field, or equivalent experience.
- Experience in vulnerability research and exploitation
- Familiarity with native and web programming languages, development practices, and common bug patterns (we use a lot of Rust and TypeScript, Pulumi, Terraform, and Helm)
- Familiarity with analysis tooling and frameworks (fuzzing, static analysis, flamegraph, etc.)
- Contributions to the security community (public research, blogging, presentations, etc.) preferred
- Familiarity with web3 programming languages (Move, Solidity, etc.), security tools and frameworks, including formal verification preferred.
Listed in: Web3 Jobs, Research Web3 Jobs, Community Web3 Jobs, Security Web3 Jobs, Developer Web3 Jobs, Engineering Crypto Jobs, Web3 Crypto Jobs, Rust Web3 Jobs, TypeScript Web3 Jobs, Solidity Crypto Jobs, Move Web3 Jobs, Full Time Web3 Jobs.