Remote AppSec Engineer - Blockchain & Smart Contracts

Wired Currencies; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote work

Global coworking spaces

Paid vacation and sick leave

Training

Language courses

Learning sponsorship

Job summary

RootstockLabs Ltd. is hiring an Application Security Engineer for remote work across UTC-3 to UTC+2. The role involves reviewing source code, smart contracts, and protocol changes to identify security issues in Bitcoin-secured financial infrastructure.

It requires 3+ years in Application Security or Security Engineering and hands-on secure coding expertise. The position is fully remote, with a flexible time window, and supports security automation, external audits, and incident investigations.

Qualifications

• Requires at least 3 years in Application Security or Security Engineering.
• Proficient in secure code review and vulnerability knowledge.
• Experience with programming languages such as Java and at least one of TS/JS/Python/Go/Rust.

Responsibilities

• Review application source code, smart contracts, and protocol changes for security issues.
• Perform threat modeling and architecture reviews.
• Coordinate bug bounty triage and remediation with external audits.
• Support security automation, incident investigations, and CI/CD security controls.

Skills

Secure code review

OWASP Top 10

Java

TypeScript

JavaScript

Python

Go

Rust

Blockchain security

SAST/DAST

CI/CD security

Bug bounty triage

Vulnerability disclosure

Threat modeling

C/C++

Fuzzing

English fluency

Job description

RootstockLabs Ltd. is hiring an Application Security Engineer for remote work across UTC-3 to UTC+2. The role involves reviewing source code, smart contracts, and protocol changes to identify security issues in Bitcoin-secured financial infrastructure.

It requires 3+ years in Application Security or Security Engineering and hands-on secure coding expertise. The position is fully remote, with a flexible time window, and supports security automation, external audits, and incident investigations.