Security Chain Engineer

The role

You will build and harden the core of the Injective chain, making sure every module, upgrade and integration is safe before it reaches mainnet. You will review designs for attack vectors, audit native chain code and EVM contracts, and build tooling that keeps the chain secure over time.

What you will do

• Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
• Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
• Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling technical and economic risks
• Build, maintain, and test hardened core components of the chain and fix vulnerabilities directly in the codebase
• Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
• Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
• Write clear security reports, internal and public, and coordinate with external auditors, bug bounty researchers, and partners
• Take part in incident response, and drive post-mortems and remediation when issues arise
• Research and track the latest blockchain exploits and security developments, and share learnings with the team

Required qualifications

• Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security
• 5+ years of experience in software security
• Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
• Solid understanding and proficiency of Golang and/or Solidity
• Strong knowledge of Go idioms, libraries, and parallel processing, plus common security pitfalls in Go and Cosmos-SDK chains
• Strong knowledge of blockchain, DeFi and DEX concepts, consensus mechanisms, CosmWasm contract platform
• Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos
• Ability to write clear security reports and explain risk to technical and non-technical team members

Nice to have

• A track record in bug bounties, CTFs, or published audits and CVEs
• Experience with fuzzing and formal verification tools
• Prior experience working in trading or at an exchange
• Knowledge of financial instruments and markets

Benefits

• Competitive salary and INJ token award
• Remote-friendly work environment with flexible hours
• Unlimited PTO
• Equipment
• Home Office Stipend
• Opportunity to work on cutting-edge blockchain technology in the finance industry
• Collaborative team culture with opportunities for professional growth and development
• Global team meetups

Before you apply

• The company will only contact candidates from the @injectivelabs.org domain; report any other account claiming to be them

About the company

Injective Labs is the core contributor to Injective, an interoperable smart contracts blockchain optimized for decentralized finance applications. It is incubated by Binance and backed by firms such as Jump Crypto, Pantera and Mark Cuban.