Information Security Engineer, Product

Stack

Responsibilities

• ▹Analyze and assess novel and recurring security issues via design reviews, code audits and penetration tests
• ▹Design and build security tools, and develop mitigations, frameworks and hardening strategies for vulnerability prevention and detection
• ▹Review and develop secure operational practices and provide security guidance for engineers
• ▹Respond to and triage reports from bug bounty programs

Requirements

• ▹B.S. or M.S. in Computer Science, a related technical field, or equivalent experience
• ▹3+ years of experience in vulnerability research and exploitation
• ▹Experience with native development practices and common vulnerability patterns (e.g. Rust, C)
• ▹Experience with automated security analysis tooling and frameworks (fuzzing, static analysis, etc.)

Nice to have

• ▹Contributions to the security community (public research, blogging, talks at relevant conferences)
• ▹Experience with virtual machines or complex runtime environments, such as MoveVM (extra bonus), EVM, WASM or LLVM-based runtimes, including their security models, sandboxing and execution isolation
• ▹Familiarity with smart contract programming languages (extra bonus for Move), security tools and frameworks, including formal verification

Soft skills

What we offer

• ▹100% insurance premium coverage for medical, dental and vision for you and your dependents (US employees)
• ▹Equipment of your choice
• ▹Flexible vacation time, 11 holidays and floating company days off
• ▹Competitive salary
• ▹Protocol token grants
• ▹401k matching (US employees)
• ▹Fun and inclusive in-person and digital events

About the company

Aptos is a people-first blockchain whose mission is to give billions of people safe and scalable access to decentralized assets. It was founded by some of the original creators and maintainers of the Diem blockchain.