Description:

Phantom is seeking a Staff KMS Security Engineer to enhance the security of its self-custodial wallet, which supports multiple cryptocurrencies including Solana, Bitcoin, Ethereum, and Polygon.
The role involves identifying, exploiting, and mitigating security vulnerabilities in software applications, conducting security assessments, and collaborating with development teams to integrate security throughout the software development lifecycle.
Responsibilities include owning critical security infrastructure, performing regular security assessments, identifying and mitigating vulnerabilities, staying updated on security techniques, writing detailed reports, implementing secure coding practices, participating in incident response, and leading cross-team projects.

Requirements:

Candidates must have 7+ years of experience in offensive security techniques, particularly in blockchain technology and cryptography.
Experience working with Key Management Services is essential.
A strong understanding of security risks, vulnerabilities, and concepts in web and mobile applications is required.
Proficiency in code review for JavaScript and Typescript, along with a solid understanding of application security threats and offensive security techniques, is necessary.
Candidates should be able to write Proof of Concepts (PoCs) to demonstrate vulnerabilities and ensure that patch code meets repository standards.
Strong analytical and problem-solving skills are required, along with good verbal and written communication skills.
Nice to have: experience as a security software engineer at crypto companies, developing key management solutions, and working with HSM, trust computing, or TEEs (AWS Nitro Enclave or Intel SGX).