Remote Application Security Engineer - AI-Driven Security

RootstockLabs; United States; A distancia; USD 140.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive pay

100% remote

Work-life balance

Learning sponsorship

Global team projects

Descripción de la vacante

RootstockLabs is seeking an Application Security Engineer to secure our Bitcoin-backed DeFi infrastructure by reviewing code, smart contracts, and protocol changes, and by building security automation for the development lifecycle. You will collaborate with development teams on threat modeling and architecture reviews, and coordinate external security audits with third-party auditors.

You will also research attack techniques relevant to the ecosystem and translate them into concrete defenses,

Formación

• 3+ years of experience in Application Security or Security Engineering.
• Hands-on blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security.
• Experience building and operating security automation, AI-assisted workflows, SAST/DAST, and CI/CD security gates.

Responsabilidades

• Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects.
• Threat-model new products and features with development teams.
• Triage and validate bug bounty reports; assess severity and coordinate remediation with engineering.
• Collaborate on external security audits: scope engagements and work with third-party auditors through to resolution of findings.
• Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines.
• Research attack techniques relevant to the ecosystem and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes.
• Support incident investigations when application-layer issues arise.

Conocimientos

Application security

Blockchain security

Smart contract auditing

CI/CD security

Threat modeling

Herramientas

SAST

DAST

Secret scanning

LLM-based triage

Code review automation

Descripción del empleo

RootstockLabs is seeking an Application Security Engineer to secure our Bitcoin-backed DeFi infrastructure by reviewing code, smart contracts, and protocol changes, and by building security automation for the development lifecycle. You will collaborate with development teams on threat modeling and architecture reviews, and coordinate external security audits with third-party auditors.

You will also research attack techniques relevant to the ecosystem and translate them into concrete defenses,