Remote Senior Blockchain App Security Engineer

RootstockLabs; Pakistan; Remote; PKR 30,429,000 - 47,026,000; Full time

Benefits offered by this job

Competitive pay

100% remote work

Paid vacation and sick leave

Learning sponsorship

Job summary

RootstockLabs is seeking an Application Security Engineer to secure its Bitcoin-backed DeFi infrastructure. You will review code and smart contracts, lead threat modeling, manage bug bounty programs, and coordinate external audits with third-party firms.

You will also build automated security workflows and research new attack techniques to harden ecosystems. You will collaborate with development teams across EVM-based ecosystems and contribute to incident response when needed.

Qualifications

• 3+ years in application security or security engineering.
• Secure code review in Java and at least one of TypeScript/JavaScript, Python, Go, or Rust.
• Hands-on blockchain security: smart contract auditing (Solidity/EVM) or protocol/node security.
• Experience building and operating security automation, AI-assisted workflows, SAST/DAST, and CI/CD security gates.
• Fluent English.

Responsibilities

• Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects.
• Participate in design and architecture reviews; threat-model new products and features with development teams.
• Triage and validate bug bounty reports; assess severity and coordinate remediation with engineering.
• Collaborate on external security audits: scope engagements and work with third-party auditors through to the resolution of findings.
• Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines.
• Research attack techniques relevant to the ecosystem (EVM, bridges, p2p) and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes.
• Support incident investigations when application-layer issues arise.

Skills

Security engineering

Vulnerability analysis

Java secure review

JavaScript/TypeScript

Python/Go/Rust

Blockchain security

Security automation

English fluency

Tools

Solidity/EVM auditing

Job description

RootstockLabs is seeking an Application Security Engineer to secure its Bitcoin-backed DeFi infrastructure. You will review code and smart contracts, lead threat modeling, manage bug bounty programs, and coordinate external audits with third-party firms.

You will also build automated security workflows and research new attack techniques to harden ecosystems. You will collaborate with development teams across EVM-based ecosystems and contribute to incident response when needed.