Security Chain Engineer
Role in brief
Injective Labs seeks a Security Chain Engineer focused on enhancing the security of its blockchain. Ideal candidates have strong backgrounds in Golang and Solidity, with a focus on DeFi security. This role involves auditing, building, and securing blockchain infrastructure.
About the role
As a Security Chain Engineer at Injective Labs, you will be part of a global team dedicated to fortifying the Injective chain. Your primary responsibility will be to execute security audits and ensure that all modules and upgrades are secure before they are deployed on the mainnet.
You will collaborate with senior protocol engineers to integrate security into new features from the outset, addressing both technical and economic risks. Your work will include developing security tools, conducting incident responses, and keeping the team informed about the latest security developments in the blockchain space.
Skills that matter here
- Golang: This role requires proficiency in Golang for building and securing blockchain infrastructure.
- Solidity: Experience with Solidity is necessary for auditing and reviewing EVM smart contracts.
- DeFi: Understanding DeFi protocols is crucial for assessing security risks and vulnerabilities.
- blockchain: A solid grasp of blockchain concepts is essential for executing internal audits and enhancing security.
- security: The role focuses on software security, requiring hands-on experience in auditing blockchain and DeFi protocols.
Who this role suits
- Individuals with a strong background in software security and blockchain engineering will thrive.
- Candidates who enjoy collaborating in a global team and are comfortable with flexible work hours.
- Those who can communicate complex security concepts clearly to both technical and non-technical team members.
- Professionals who are proactive in researching and addressing the latest blockchain security threats.
From the employer
- Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
- Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
- Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling both technical and economic risks (e.g. oracle manipulation, MEV, liquidation and market-manipulation attacks)
- Build, maintain, and test hardened core components of the chain (consensus, state management, financial infrastructure), and fix vulnerabilities directly in the codebase
- Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
- Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
- Write clear, high-quality security reports, both internal and public, and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure
- Take part in incident response, and drive post-mortems and remediation when issues arise
- Research and track the latest blockchain exploits and security developments, and share learnings with the wider team
- Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security
- 5+ years of experience in software security
- Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
- Solid understanding and proficiency of Golang and/or Solidity
- Strong knowledge of Go idioms, libraries, and parallel processing, plus the security pitfalls common in Go and Cosmos-SDK chains (non-determinism, panics, unbounded iteration, gas and DoS issues)
- Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm contract platform
- Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos
- Ability to write clear security reports and explain risk to both technical and non-technical team members
- Competitive salary and INJ token award
- Remote-friendly work environment with flexible hours.
- Unlimited PTO
- Equipment
- Home Office Stipend
- Opportunity to work on cutting-edge blockchain technology in the finance industry.
- Collaborative team culture with opportunities for professional growth and development
- Global team meetups
Questions about this role
Is this position remote?
Yes, the role is fully remote with flexible hours.
What is the required experience level?
Candidates should have a minimum of 3 years as a Blockchain Engineer with a strong focus on security.
How do I apply?
You can apply through the Injective Labs website at https://injectivelabs.org/?ref=sailonchain.com.
✓ Drop your CV once, then continue to the employer's application form. Your profile stays here for every recruiter hiring on web3vacancy.