Lead Security Engineer

The role

The Lead Security Engineer will secure mission critical software across the web2 and web3 stack. This includes smart contract protocols, DeFi integrations, cloud infrastructure, and public API/SDKs.

What you will do

• Conduct internal audits of Cloud platform security and implement best practices.
• Create threat models for first party and third party software.
• Collaborate with infrastructure engineers to detect, fix, and prevent exploits.
• Develop tooling and SOPs such as incident response manuals.
• Conduct periodic incident response training for team members.
• Collaborate with technical and non-technical staff to secure non-code related attack vectors.
• Collaborate with the Smart Contract team to conduct internal audits and set up secure operational practices.
• Build and deploy full stack tools for mitigating exploits and financial risks.
• Detect malicious transactions in the mempool and automate pauses across smart contracts.
• Define invariants and detect violations in realtime.

Required qualifications

• Deep knowledge of cloud infrastructure and web2 security practices.
• Deep knowledge of cybersecurity standards and social engineering defenses.
• Experience building full stack applications.
• Deep Knowledge of the EVM security tooling, testing, and best practices
• Deep knowledge of common hacks and exploits in DeFi protocols.
• Deep knowledge of financial attack vectors in DeFi protocols.
• Experience with CTFs, bugbounties, whitehat activities.

Benefits

• Competitive salary
• Participate in ownership structures

Before you apply

• Once we receive your application, we'll be in touch if we are interested.

About the company

Paxos Labs builds enterprise infrastructure that powers the next generation of trusted onchain financial products. They work with the largest financial enterprises in the world to build transparent and verifiable onchain infrastructure.