Remote Application Security Engineer

Description:

• Vac builds public good protocols for the decentralised web and conducts applied research to develop protocols, libraries, and publications.
• The Vac Security service unit supports IFT projects by conducting security audits and developing robust security plans.
• The security team provides expert guidance on security best practices and risk management strategies to enhance the security posture of the IFT ecosystem.
• The Application Security Engineer will perform in-depth reviews of critical code, focusing on low-level languages like Rust, Nim, and C++, to identify vulnerabilities.
• The role involves collaborating with development teams to remediate security issues and prepare for external security audits by defining audit scope and organizing technical documentation.
• This position is hands-on and requires a passion for secure software development and proactive risk mitigation.

Requirements:

• A minimum of 5 years of experience in Web3 security engineering, with proven experience in securing blockchain protocols, smart contracts, or cryptographic systems is required.
• Proficiency in low-level programming languages such as Rust, Nim, and C++ is essential.
• Expertise in secure coding practices, including the identification of code/protocol-level vulnerabilities and code analysis/debugging is necessary.
• Experience with manual and automated code review techniques and penetration testing in Web3 ecosystems is expected.
• Familiarity with cryptographic protocols, secure protocol design, and blockchain/distributed systems security is important.
• Incident response capabilities, including detection, analysis, containment, and recovery, are required.
• Experience collaborating with development and product teams to remediate vulnerabilities and prepare for external audits is necessary.
• Strong documentation and communication skills for technical materials and stakeholder interactions are essential.
• A deep interest in blockchain technology and decentralisation is preferred.

Benefits:

• Compensation can be provided in any mix of fiat or cryptocurrency, offering flexibility in payment options.