Minimum of 3 years' experience as a Blockchain Engineer with a focus on security
5+ years of experience in software security
Hands-on experience auditing DeFi protocols or blockchain core code
Proficiency in Golang and/or Solidity
Strong knowledge of Go idioms and security pitfalls in Go and Cosmos-SDK chains
Understanding of blockchain, DeFi, DEX concepts, and consensus mechanisms
Solid grasp of cryptographic primitives used by Ethereum and Cosmos
Responsibilities
Execute internal security audits of Cosmos-SDK modules
Review and audit EVM smart contracts and cross-chain components
Partner with engineers to integrate security into new chain features
Build and maintain hardened core components of the chain
Develop security tooling such as fuzzers and static analysis
Review chain upgrades with a focus on consensus safety and correctness
Write clear security reports and coordinate with external auditors
Participate in incident response and drive post-mortems
Research and track blockchain exploits and share insights with the team
Benefits
Remote-friendly work environment with flexible hours
Unlimited PTO
Equipment provided
Home Office Stipend
Opportunity to work on cutting-edge blockchain technology
Collaborative team culture with growth opportunities
Global team meetups
Full Job Description
About the role
We are looking for an accomplished Chain Engineer with a security focus to join our existing highly-skilled global protocol team. You will build and harden the core of the Injective chain, making sure every module, upgrade and integration is safe before it reaches mainnet. You'll work alongside protocol engineers from spec to release, reviewing designs for attack vectors, auditing native chain code and EVM contracts, and building the tooling that keeps the chain secure over time. We're looking for someone who can work autonomously, has a hacker mentality, and thinks like an attacker while building like an engineer.
If you're an autonomous engineer with a strong security mindset who enjoys working with a high degree of ownership, and you're looking to protect and strengthen the financial infrastructure of one of the fastest growing blockchains, this role is for you.
Responsibilities:
Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling both technical and economic risks (e.g. oracle manipulation, MEV, liquidation and market-manipulation attacks)
Build, maintain, and test hardened core components of the chain (consensus, state management, financial infrastructure), and fix vulnerabilities directly in the codebase
Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
Write clear, high-quality security reports, both internal and public, and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure
Take part in incident response, and drive post-mortems and remediation when issues arise
Research and track the latest blockchain exploits and security developments, and share learnings with the wider team
Who you are:
Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security
5+ years of experience in software security
Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
Solid understanding and proficiency of Golang and/or Solidity
Strong knowledge of Go idioms, libraries, and parallel processing, plus the security pitfalls common in Go and Cosmos-SDK chains (non-determinism, panics, unbounded iteration, gas and DoS issues)
