This position is no longer accepting applications.
It stays published for reference. Browse open web3 jobs or similar roles below.
Information Security Engineer, Product
Aptos Labs website
Remote
middle
14 days ago
full-time
closed
Responsibilities
- Analyze and assess novel and recurring security issues via design reviews, code audits, and penetration tests
- Design and build security tools, and develop mitigations, frameworks, and hardening strategies tailored for vulnerability prevention and detection
- Review and develop secure operational practices, and provide security guidance for engineers
- Respond to and triage reports from bug bounty programs
Requirements
- B.S. or M.S. in Computer Science, a related technical field, or equivalent experience
- 3+ years of experience in vulnerability research and exploitation
- Experience with native development practices and common vulnerability patterns (e.g., Rust, C, etc.)
- Experience with automated security analysis tooling and frameworks (fuzzing, static analysis, etc.)
Conditions
- Contributions to the security community (public research, blogging, talks in relevant conferences, etc.) will be a plus
- Experience with virtual machines or complex runtime environments, such as MoveVM (extra bonus), EVM, WASM, or LLVM-based runtimes, including their security models, sandboxing, and execution isolation will be a plus
- Familiarity with smart contract programming languages (extra bonus for Move), security tools, and frameworks, including formal verification will be a plus