Remote Senior App Security Engineer (Blockchain/DeFi)

RootstockLabs; København; Remote; DKK 900,000 - 1,300,000; Full time

Benefits offered by this job

100% Remote Work

Paid vacation and sick leave

Training sponsorship

Global coworking access

Job summary

RootstockLabs is seeking an Application Security Engineer to secure our Bitcoin-secured DeFi infrastructure. You will review code, smart contracts, and protocol changes, and build security automation across the development lifecycle.

You will model threats with dev teams and coordinate bug bounties and audits with external parties. You will research attack techniques in EVM/bridges/p2p and translate findings into defenses, while supporting incident investigations and CI security gates.

Qualifications

• 3+ years of experience in Application Security or Security Engineering.
• Solid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust.
• Hands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security.
• Experience building and operating security automation, AI-assisted workflows (LLM-based triage, code review, or scanning), SAST/DAST, dependency and secret scanning, and CI/CD security gates.
• Fluent English

Responsibilities

• Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects.
• Participate in design and architecture reviews; threat-model new products and features with development teams.
• Triage and validate bug bounty reports; assess severity and coordinate remediation with engineering.
• Collaborate on external security audits: scope engagements and work with third-party auditors through to the resolution of findings.
• Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines.
• Research attack techniques relevant to the ecosystem (EVM, bridges, p2p) and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes.
• Support incident investigations when application-layer issues arise

Skills

Security engineering

OWASP Top 10

Secure code review

Threat modeling

CI/CD security gates

English fluency

Tools

Solidity/EVM auditing

SAST/DAST

CI/CD tooling

Job description

RootstockLabs is seeking an Application Security Engineer to secure our Bitcoin-secured DeFi infrastructure. You will review code, smart contracts, and protocol changes, and build security automation across the development lifecycle.

You will model threats with dev teams and coordinate bug bounties and audits with external parties. You will research attack techniques in EVM/bridges/p2p and translate findings into defenses, while supporting incident investigations and CI security gates.