Security Chain Engineer (Injective Labs)

The role

You will audit and harden the core of the Injective chain, including its Cosmos-SDK modules, EVM contracts and cross-chain components. You will review designs for attack vectors, build security tooling, and take part in incident response.

What you will do

• Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
• Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
• Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling technical and economic risks
• Build, maintain, and test hardened core components of the chain and fix vulnerabilities directly in the codebase
• Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
• Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
• Write clear security reports and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure
• Take part in incident response, and drive post-mortems and remediation when issues arise
• Research and track the latest blockchain exploits and security developments, and share learnings with the team

Required qualifications

• Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security
• 5+ years of experience in software security
• Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
• Solid understanding and proficiency of Golang and/or Solidity
• Strong knowledge of Go idioms, libraries, and parallel processing, plus security pitfalls common in Go and Cosmos-SDK chains
• Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm contract platform
• Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos
• Ability to write clear security reports and explain risk to technical and non-technical team members

Nice to have

• A track record in bug bounties, CTFs, or published audits and CVEs
• Experience with fuzzing and formal verification tools
• Prior experience working in trading or at an exchange
• Knowledge of financial instruments and markets

Benefits

• Competitive salary and INJ token award
• Remote-friendly work environment with flexible hours
• Unlimited PTO
• Equipment
• Home office stipend
• Opportunity to work on cutting-edge blockchain technology in the finance industry
• Collaborative team culture with opportunities for professional growth and development
• Global team meetups

Before you apply

• Only applications submitted through the link in the posting will be considered
• The company will only contact candidates from the @injective.foundation domain

About the company

Injective is a fast growing blockchain focused on financial infrastructure. The team works on protocol engineering for the Injective chain.