Senior Security Engineer (Remote)

Lightning Labs; Austria; A distancia; EUR 90.000 - 140.000; Jornada completa

Descripción de la vacante

Lightning Labs is seeking a hands-on Security Engineer to scale our security practices across web, Bitcoin, and Lightning Network services. You will design and implement security controls, perform audits, and guide a distributed team with a focus on risk management and incident response.

The ideal candidate has 5+ years in systems security, deep cryptography knowledge, and experience with Go, Rust, C/C++, or Java.

Formación

• 5+ years prior experience in systems security.
• Experience with securing web, Bitcoin, and other public-facing network services.
• Penetration testing experience and both automated and manual source code security reviews.
• Experience with Bitcoin and Lightning Network desirable.
• Experience working with distributed teams and remote collaboration.

Responsabilidades

• Design and deploy active fuzzing, black+white box testing, and pentesting infrastructure.
• Perform security audits of internal systems and open source software interacting with Bitcoin+Lightning.
• Provide mentorship to teammates.
• Create global security policy, standards, guidelines, and procedures.
• Oversee security aspects of release processes and infrastructure.
• Determine security team requirements for future growth.
• Develop incident management processes and risk assessments.

Conocimientos

Systems security

Cryptography

Protocol design

Adversarial analysis

Go

Rust

C/C++

Java

Security incident response

Security code review

Bug bounty programs

Kubernetes

AWS

Herramientas

Go

Rust

C/C++

Java

Descripción del empleo

Listed on CyberJobs.cc, a job board for cybersecurity jobs from the team behind AITraining.jobs. Lightning Labs is seeking to hire a Security Engineer for the ongoing scaling of our growing engineering organization. This is a hands‑on role that consists of devising and implementing policies and procedures around best practices in systems security. The ideal candidate has experience in securing web, Bitcoin, and other public-facing network services, penetration testing, and both automated and manual source code security reviews. Due to the domain in which we work, experience with Bitcoin and the Lightning Network is extremely desirable as is knowledge of the cryptographic aspects involved in this area. As we are an international organization, experience and comfort working with highly distributed teams is a must. In addition, the ideal candidate should have a passion for our mission of bringing financial freedom to the world, as well as for Bitcoin as a whole. Although a part of the engineering organization, candidates in this position will work across functional team boundaries to ensure all aspects of the business are appropriately considered and covered by security best practices. Responsibilities may include but are not limited to

• Designing and deploying active fuzzing, black+white box testing and penetration testing infrastructure for open source and production systems
• Performing security audits and review of both internal production systems as well as open source software which interacts with Bitcoin+Lightning in a security critical manner
• Provide mentorship and guidance to level up your teammates
• Creating global security policy, standards, guidelines, and procedures to ensure ongoing maintenance of security
• Overseeing security aspects of software release processes and infrastructure
• Determining security team requirements for future growth
• Developing and ensuring responsiveness of security incident management processes
• Performing risk management assessments

Preferred Experience

• At least 5 years prior experience in in systems security
• An ability to work with a high impact, fast-moving startup team
• Extensive knowledge of operating system and computer architecture internals
• Strong understanding of cryptography, protocol design and adversarial analysis
• Experience in reverse engineering and exploiting of cryptographic protocol (cryptocurrencies like Bitcoin) systems
• Extensive expertise with professional software development experience in Go, Rust, C/C++, and/or Java
• Experience in security incident response
• Experience in security code review and vulnerability triaging
• Prior experience running an open source facing bug bounty program
• 2+ years management experience or experience as a senior decision maker
• Experience working with remote teams
• Experience working with Kubernetes and AWS infrastructure
• Working knowledge of fundamental Bitcoin and Lightning design principles
• Candidates with additional experience are welcome to apply as we are open to adjusting the role accordingly