Security Engineer EVM

Asymmetric Research; Remote; IDR 1.177.856.000 - 1.682.652.000; Full time

Job summary

A specialized security firm is seeking a security expert focusing on web3 technologies. In this fully remote role, you will design security controls, conduct security research, and collaborate on audits. Candidates should have experience with smart contract platforms and a background in security practices. The position offers generous benefits, including paid vacation, healthcare, and a competitive salary.

Benefits

25-days paid vacation

Office and equipment stipend

Pension / 401K programs

Life Insurance

Premium Healthcare

Competitive Base Salary

Lucrative Bonus Programs

Qualifications

• Strong desire to understand how things work.
• Proven experience as a consultant, engineer, bug bounty hunter or auditor.
• Prior experience with open source development practices.

Responsibilities

• Design and implement security controls to prevent vulnerabilities.
• Perform security research in EVM and/or SVM smart contract platforms.
• Collaborate on internal security audits and shepherd external audits.

Skills

Understanding of smart contract platforms

Experience in security research

Ability to quickly absorb new information

Familiarity with reverse engineering

Understanding of blockchain infrastructure technologies

Tools

Go

Rust

Job description

Asymmetric Research

Asymmetric Research (“AR”) is a specialized security firm focused on deep partnerships with L1/L2 blockchains and DeFi protocols in an effort to keep them safe. We specialize in four core domains of web3 security; research, engineering, incident response, and infrastructure services.

Culture

AR is a fully remote organization and members of our team have been strongly committed to open-source values for decades, having worked at organizations with deep open-source roots and strong security programs including Google, Netflix, Mozilla, Stripe, and Jump Crypto. We pride ourselves on maintaining the highest levels of confidentiality, trust, and professionalism.

Responsibilities

• Design and implement security and defense-in-depth controls to prevent and limit vulnerabilities.
• Perform cutting edge security research in EVM and/or SVM smart contract platforms.
• Develop security tooling and developer workflows to aid in the early detection of vulnerabilities.
• Collaborate with core contributors to conduct internal security audits.
• Shepherd external security audits with the help of leading 3rd party audit firms.
• Operate leading bug bounty programs on Immunefi.
• Work in a diverse decentralized team environment with web3 professionals.
• Clearly communicate security risks and solutions.
• Adhere to the highest standards of integrity, trust, and professionalism.

Requirements

• Strong desire to understand how things work, and the ability to quickly absorb new information.
• Familiarity with at least one or more smart contract platforms.
• Proven experience as either a consultant, engineer, bug bounty hunter or auditor.
• Prior experience working with open source development practices.
• Willingness and aptitude to learn multiple blockchains runtimes and validator implementations written in languages like Go and Rust.
• Understanding of blockchain infrastructure technologies, such as validation, bridging or oracles.
• Prior experience with reverse engineering and/or fuzzing.
• Prior experience with code reviews
• Prior leaderboard ranking on bug bounty, code contest, or CTF competitions.

Benefits

• 25-days paid vacation
• Office and equipment stipend
• Pension / 401K programs
• Life Insurance
• Premium Healthcare
• Competitive Base Salary
• Lucrative Bonus Programs