Security Engineer

Tempo; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Tempo is building a full-time internal Red Team to stress-test our infrastructure. As a security engineer, you will write Rust fuzzers, simulate economic attacks on our testnet, and dissect the EVM to uncover edge cases in our execution client.

You will proactive hunt vulnerabilities, design security tooling with the Foundry team, and collaborate with engineers to review architecture while assessing MEV and staking risks.

Qualifications

• Fluency in reading and writing production-level code in systems languages, with a strong preference for Rust.
• Deep expertise in EVM internals, including intimate knowledge of opcodes, storage slots, gas metering, and precompiles.
• Proven track record of offensive security, such as high rankings in CTFs (e.g., Paradigm CTF), high-severity bug bounty submissions, or published research.
• Experience building custom security automation or tooling rather than relying solely on off-the-shelf scanners.
• Bleeding-edge knowledge of the latest blockchain security research, including recent hacks and how these could have been mitigated.

Responsibilities

• Proactively hunt for vulnerabilities in the Tempo protocol, consensus engine, and bridge architecture, treating our mainnet like a continuous CTF challenge.
• Design and implement security tooling and automation in liaison with the Foundry team to catch logic errors and edge cases.
• Partner with engineering teams to review critical architecture across our codebase.
• Analyze incentives and game-theoretic risks within the protocol, such as MEV and staking dynamics, to prevent economic exploits.

Skills

Rust programming

EVM internals

Offensive security

Security tooling

Tools

Custom security automation tooling

Job description

We are building a full-time internal Red Team to continuously stress-test our own infrastructure. As a security engineer, you won't just be ticking compliance boxes; you will be writing Rust fuzzers, simulating economic attacks on our testnet, and dissecting the EVM to find edge cases in our execution client. We are looking for a builder who understands that the best way to secure a protocol is to try to break it continuously. If you have a history of topping CTF leaderboards, submitting high-severity bug bounties, or building your own security tooling because the standard ones weren't good enough—this role is for you.

Responsibilities

• Proactively hunt for vulnerabilities in the Tempo protocol, consensus engine, and bridge architecture, treating our mainnet like a continuous CTF challenge.
• Design and implement security tooling and automation in liaison with the Foundry team to catch logic errors and edge cases.
• Partner with engineering teams to review critical architecture across our codebase.
• Analyze incentives and game-theoretic risks within the protocol, such as MEV and staking dynamics, to prevent economic exploits.

Qualifications

• Fluency in reading and writing production-level code in systems languages, with a strong preference for Rust.
• Deep expertise in EVM internals, including intimate knowledge of opcodes, storage slots, gas metering, and precompiles.
• Proven track record of offensive security, such as high rankings in CTFs (e.g., Paradigm CTF), high-severity bug bounty submissions, or published research.
• Experience building custom security automation or tooling rather than relying solely on off-the-shelf scanners.
• Bleeding-edge knowledge of the latest blockchain security research, including recent hacks and how these could have been mitigated.

Attributes

• Razor-sharp thinker with precise command of language
• Concise, evidence-based communicator
• Excellent organizational and logistical skills
• Intense curiosity and open-mindedness
• Scrappiness; willingness to roll up sleeves