Welcome to RemoteYeah 2.0! Find out more about the new version here.

Remote Application Security Engineer

at IFT

Posted 2 weeks ago 0 applied

Description:

  • Vac builds public good protocols for the decentralised web and conducts applied research to develop protocols, libraries, and publications.
  • The Vac Security service unit supports IFT projects by conducting security audits and developing robust security plans.
  • The security team provides expert guidance on security best practices and risk management strategies to enhance the security posture of the IFT ecosystem.
  • The Application Security Engineer will perform in-depth reviews of critical code, focusing on low-level languages like Rust, Nim, and C++, to identify vulnerabilities.
  • The role involves collaborating with development teams to remediate security issues and prepare for external security audits by defining audit scope and organizing technical documentation.
  • This position is hands-on and requires a passion for secure software development and proactive risk mitigation.

Requirements:

  • A minimum of 5 years of experience in Web3 security engineering, with proven experience in securing blockchain protocols, smart contracts, or cryptographic systems is required.
  • Proficiency in low-level programming languages such as Rust, Nim, and C++ is essential.
  • Expertise in secure coding practices, including the identification of code/protocol-level vulnerabilities and code analysis/debugging is necessary.
  • Experience with manual and automated code review techniques and penetration testing in Web3 ecosystems is expected.
  • Familiarity with cryptographic protocols, secure protocol design, and blockchain/distributed systems security is important.
  • Incident response capabilities, including detection, analysis, containment, and recovery, are required.
  • Experience collaborating with development and product teams to remediate vulnerabilities and prepare for external audits is necessary.
  • Strong documentation and communication skills for technical materials and stakeholder interactions are essential.
  • A deep interest in blockchain technology and decentralisation is preferred.

Benefits:

  • Compensation can be provided in any mix of fiat or cryptocurrency, offering flexibility in payment options.