Security Engineer

Windranger Labs; Singapore; On-site; SGD 115,000 - 168,000; Full time

Job summary

A leading company in blockchain technology is seeking a seasoned security professional to enhance its ecosystem's security. The role involves conducting thorough security reviews, training developers, and responding to incidents, contributing to the integrity of their decentralized operations. Candidates with strong penetration testing and code auditing experience are encouraged to apply, even if they do not meet every requirement.

Qualifications

• 5+ years experience in penetration testing and code auditing.
• Proficiency in programming languages like Node.js or Golang.
• Knowledge of security design principles and best practices.

Responsibilities

• Conduct security reviews and code audits during development.
• Monitor and respond to security incidents.
• Coordinate with business units on security status.

Skills

Penetration Testing

Code Auditing

Security Incident Response

Risk Analysis

Proactive Thinking

Education

Bachelor's degree or above

Job description

Who we are

Mantle Network is an EVM-compatible Ethereum layer 2 (L2) ecosystem designed to enhance scalability and efficiency on the Ethereum blockchain. Our ecosystem includes Mantle Network, a decentralized autonomous organization (DAO) called Mantle Governance, and an Ether (ETH) liquid staking protocol, Mantle LSP.

The Mantle token ($MNT) is central to our ecosystem, serving as both the product and governance token, seamlessly linking the various network elements.

According to L2BEAT, Mantle Network is ranked as the eighth largest L2 network by total value locked (TVL), making it one of the most prominent L2 solutions. Mantle LSP ranks as the fourth largest liquid staking protocol by TVL, as per DefiLlama. Mantle also boasts one of the world's largest treasuries, valued at $3.8 billion, leveraging this to incentivize ecosystem growth.

Your Role

• Identify requirements risks and conduct security reviews during the development process, including code audits, pre-release testing, and post-launch risk monitoring.
• Follow up on security vulnerabilities and alerts, assisting in fixing issues until resolution.
• Provide security training for developers and offer effective solutions for security issues in code.
• Respond to security incidents promptly to resolve issues.
• Continuously monitor and analyze security intelligence, performing risk alerts.
• Coordinate regularly with business units to update on security status, requirements, and standards, ensuring implementation.

Your Craft

• Bachelor's degree or above with over 5 years of experience in penetration testing and code auditing.
• Proficiency in at least one programming language (e.g., Node.js, Golang).
• Knowledge of security incident response techniques and procedures.
• Familiarity with penetration testing, APT attack-defense techniques, and internal network penetration (including lateral privilege escalation, evasion techniques, tunneling, etc.).
• Understanding of common internet business security design and data security best practices.
• Familiarity with encryption algorithms, TLS, OAuth, JWT, and related technologies.
• Knowledge of major public blockchains (BTC/ETH) and digital currency wallet principles.
• Proactive thinking and strong learning ability.

Extra Credit

• Experience with threat modeling, SDL/devsecops practices.
• Experience with APT tracing.
• Development experience with security tools and platforms.
• Experience in emergency response planning, ongoing intelligence tracking, and operational activities.

If you believe you have valuable experience to contribute but do not meet all criteria, we still welcome your application. We consider all candidates.