Security Engineer: Ethereum/EVM/Solidity
Wormhole
Location
Remote - AMER/EMEA/APAC
Employment Type
Full time
Department
Security Engineering
Asymmetric Research:
Asymmetric Research ("AR") is a boutique security venture focused on deep partnerships with L1/L2 blockchains and DeFi protocols in an effort to keep them safe. We specialize in four core domains of web3 security; research, engineering, incident response, and infrastructure services.
Culture:
AR is a fully remote organization and members of our team have been strongly committed to open-source values for decades, having worked at organizations with deep open-source roots and strong security programs including Google, Netflix, Mozilla, Stripe, and Jump Crypto. We pride ourselves on maintaining the highest levels of confidentiality, trust, and professionalism.
Responsibilities:
- Design and implement security and defense-in-depth controls to prevent and limit vulnerabilities. 
- Perform cutting edge security research in EVM and other Ethereum-based smart contract platforms. 
- Develop security tooling and developer workflows to aid in the early detection of vulnerabilities. 
- Collaborate with core contributors to conduct internal security audits. 
- Shepherd external security audits with the help of leading 3rd party audit firms. 
- Operate leading bug bounty programs on Immunefi. 
- Work in a diverse decentralized team environment with web3 professionals. 
- Clearly communicate security risks and solutions. 
- Adhere to the highest standards of integrity, trust, and professionalism. 
Requirements:
- Strong desire to understand how things work, and the ability to quickly absorb new information. 
- Familiarity with at least one or more smart contract platforms. 
- Proven experience as either a consultant, engineer, bug bounty hunter or auditor. 
- Prior experience working with open source development practices. 
- Willingness and aptitude to learn multiple EVM-based runtimes and validator implementations. 
- Understanding of blockchain infrastructure technologies, such as validation, bridging or oracles. 
- Prior experience with reverse engineering and/or fuzzing. 
- Prior experience with code reviews 
- Prior leaderboard ranking on bug bounty, code contest, or CTF competitions. 
Benefits:
- 25-days paid vacation 
- Office and equipment stipend 
- Pension / 401K programs 
- Life Insurance 
- Premium Healthcare 
- Competitive Base Salary 
- Lucrative Bonus Programs