Role in brief
Galaxy seeks a Senior Blockchain Security Engineer to enhance the security of smart contracts and blockchain protocols. Ideal candidates have extensive experience in security engineering and blockchain technologies.
About the role
In this role, you will focus on securing smart contracts and blockchain protocols by identifying and mitigating security risks. Your work will involve secure software design, threat modeling, and conducting security reviews of blockchain systems.
Galaxy Digital Inc. is a leader in digital assets and data center infrastructure, offering a range of services from trading to tokenization. The team is dedicated to building robust security measures for on-chain systems, making your contributions critical to the company's mission.
Skills that matter here
- blockchain: This role requires strong hands-on experience with blockchain technologies to assess risks and enhance security.
- smart contracts: You will conduct security audits of smart contracts, ensuring they are robust against vulnerabilities.
- Solidity: Proficiency in Solidity is essential for performing security reviews of Ethereum-based applications.
- Rust: Experience with Rust is necessary for auditing Solana-based applications and ensuring their security.
- security engineering: Your background in security engineering will guide the development of secure design patterns and controls.
- cybersecurity: A strong foundation in cybersecurity principles is crucial for identifying and mitigating threats in blockchain systems.
Who this role suits
- You have a solid background in security engineering with a focus on blockchain technologies.
- Detail-oriented and analytical, you thrive in collaborative environments and enjoy problem-solving.
- You possess strong communication skills, enabling you to effectively guide teams on security implementations.
- Your experience includes hands-on work with smart contracts and familiarity with secure development practices.
From the employer
What You Do
- Participate in secure software design, architecture, threat modeling, and code reviews for blockchain and on-chain systems.
- Perform security reviews and audits of smart contracts, including Solidity/EVM and Rust/Solana-based applications.
- Assist teams with the mitigation of findings by assessing impact, proposing solutions, and providing technical guidance for implementation.
- Assess blockchain-specific risks including smart contract vulnerabilities, protocol design flaws, and transaction security.
- Develop secure design patterns, reusable security controls, and tooling for blockchain applications and supporting infrastructure.
- Research emerging blockchain threats and mitigations, and leverage modern security and AI-assisted tooling to improve vulnerability discovery and code review.
What We're Looking For
- Bachelor’s degree in computer science, Engineering, Cybersecurity, or a related field, or equivalent experience.
- 8+ years of experience in security engineering, product/application security, blockchain security, or software development of security features.
- Strong hands-on experience with blockchain technologies and smart contract security, including Solidity/EVM and/or Rust/Solana, secure coding, and in-depth code review.
- Experience with secure SDLC practices and security testing techniques such as static analysis, dynamic analysis, software composition analysis, and fuzzing.
- Strong familiarity with several of the following topics: key management, authentication and authorization, TLS and PKI, cloud security, container and Kubernetes security, infrastructure security, and network security.
- Strong analysis skills, detail oriented, collaborative and solution-driven, with strong verbal and written communication skills.
- Bonus points: Direct exposure to liquid staking, tokenized assets, or similar digital asset protocols and architectures. Published material on vulnerabilities/security bugs or meaningful security contributions within the Web3 community. Familiarity with DeFi protocol security, MPC, multi-signature systems, key management, and custody architectures.
What We Offer:
- Competitive base salary and discretionary bonus.
- Company-paid health and protective benefits for employees and their eligible dependents.
- Free virtual coaching and counseling sessions.
- Opportunities to learn about the Crypto industry.
- Smart, entrepreneurial, and fun colleagues.
- Employee Resource Groups.
Benefits may vary depending on location.
Questions about this role
What is the remote policy?
The position is fully remote.
What level of experience is required?
Candidates should have 8+ years of experience in security engineering or related fields.
How do I apply?
Interested candidates can apply through the company website.
✓ Apply here in a minute. Your application and answers go straight to the hiring person, so you never land in a spam pile.