Remote Staff Application Security Engineer (Security) at Phantom

Description:

Phantom is seeking a Staff Application Security Engineer to enhance the security of its self-custodial wallet, which supports multiple cryptocurrencies including Solana, Bitcoin, Ethereum, and Polygon.
The role involves identifying, exploiting, and mitigating security vulnerabilities in software applications, conducting security assessments, and collaborating with development teams to integrate security throughout the software development lifecycle.
Responsibilities include performing regular security assessments, identifying and mitigating vulnerabilities through various testing methods, staying updated on security techniques and threats, writing detailed reports, implementing secure coding practices, participating in incident response, and leading cross-team projects.

Candidates must have 7+ years of experience in offensive security techniques, particularly in blockchain technology and cryptography.
A strong understanding of security risks, vulnerabilities, and concepts in web and mobile applications is required.
Proficiency in code review for JavaScript and Typescript, along with a solid grasp of application security threats and offensive security techniques, is essential.
The ability to write Proof of Concepts (PoCs) to demonstrate vulnerabilities and ensure that patch code meets repository standards is necessary.
Strong analytical and problem-solving skills are required, along with good verbal and written communication skills.

The position offers a competitive salary and equity.
Comprehensive insurance coverage (medical, dental, vision) is provided at 100%.
A stipend for an ideal remote setup is included.
Flexible working hours and a supportive remote environment are part of the benefits.
Employees enjoy unlimited vacation time, encouraging them to take time off as needed.
A 401(k) retirement plan is available.
Monthly wellness and weekly meal benefits are provided.
Opportunities for global off-sites are included.