Application Security Engineer
Rootstocklabsltd · Remote
About this role
**Application Security Engineer** **ABOUT THE ROLE** Help secure Bitcoin-secured DeFi infrastructure by reviewing code, smart contracts, and protocol changes. Build security automation for the development lifecycle. Work with development teams on threat modeling and architecture reviews, manage bug bounty programs, coordinate external security audits, research attack techniques, and support incident investigations. **KEY RESPONSIBILITIES** • Perform security reviews of source code, smart contracts, and protocol changes • Participate in design and architecture reviews; threat-model new products and features • Triage and validate bug bounty reports; assess severity and coordinate remediation • Collaborate on external security audits with third-party auditors • Build and operate security automation (AI-assisted code review, scanning, findings-triage) • Research attack techniques (EVM, bridges, p2p) and develop concrete defenses • Support incident investigations for application-layer issues **WHAT YOU BRING** • 3+ years in Application Security or Security Engineering • Strong knowledge of OWASP Top 10 and secure code review in Java + one of: TypeScript/JavaScript, Python, Go, or Rust • Hands-on blockchain security experience: smart contract auditing (Solidity/EVM) or protocol/node-level security • Experience building security automation, AI-assisted workflows, SAST/DAST, dependency/secret scanning, and CI/CD security gates • Fluent English **NICE TO HAVE** • Bug bounty triage or vulnerability disclosure program experience • Network-level attack mitigation (p2p, eclipse, DoS) or consensus-level attack analysis • Offensive security background (pentesting, red team, CTFs, exploit development) • Public security research (CVEs, bug bounty track record, audit reports, conference talks) • C/C++ knowledge for node/client codebases • Fuzzing experience (smart contracts or native code) **BENEFITS** • Competitive compensation and unique benefits • 100% Remote Work (UTC-3 to UTC+2 time zone window) • Paid vacation and sick leave • Continuous learning: training programs, language courses, annual learning sponsorship • Work with cutting-edge blockchain technology in a global, diverse team *Background and reference checks conducted as part of hiring process.*
Listing freshness
CronJobs last confirmed this listing 16h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.