Staff Product Security Engineer (Security)

Stack

Responsibilities

• ▹Perform regular security assessments on new projects, infrastructure and code
• ▹Identify and mitigate security vulnerabilities in code, systems and networks through manual testing, automated tools, threat modeling and threat intelligence
• ▹Stay current with the latest offensive security techniques, application security threats and best practices in the blockchain space; recommend improvements to security posture
• ▹Write detailed reports of findings, present them to management and technical teams, and help prevent real-world attacks
• ▹Work with development teams to implement secure coding practices and ensure the integrity of cryptographic functions
• ▹Collaborate with other teams such as development and platform to integrate security across the organization
• ▹Participate in incident response and incident management activities
• ▹Lead large cross-team projects

Requirements

• ▹7+ years of experience in offensive security techniques, with a focus on blockchain technology and cryptography
• ▹Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications
• ▹Proficient in code review for JavaScript and TypeScript, with a strong understanding of application security threats and offensive security techniques
• ▹Ability to write PoCs to prove vulnerabilities, and to review patch code against the standards set by repository owners and maintainers
• ▹Strong analytical and problem-solving skills
• ▹Good verbal and written communication skills

Soft skills

About the company

Phantom's mission is to connect the world to the freedom of open markets; security is core to the product, which is why millions trust it to securely store their crypto assets. The team is around 180 people, fully remote, and serves over 7 million active users.