Senior Application Security Engineer

Overview

We are seeking a Senior Application Security Engineer to ensure the security of our Web, API, and Web3 platforms including Smart Contracts, DApps, and wallets. This role demands expertise in code auditing, penetration testing, and integrating security measures into software development processes.

Key Duties

• Perform thorough code audits and penetration testing on web applications, APIs, and Web3 components such as Smart Contracts, decentralized applications, and wallets.
• Implement and promote the Security Development Lifecycle (SDL) by embedding static and dynamic application security testing tools within continuous integration and delivery pipelines.
• Manage application-related security incidents, conducting root cause investigations and overseeing vulnerability remediation efforts.
• Engage in security architecture assessments during new product or business launches to identify potential logical or architectural vulnerabilities and recommend appropriate security enhancements.

Qualifications and Experience

• Minimum two years of experience in application security or penetration testing with proficient knowledge of OWASP Top 10 vulnerabilities and hands-on capability in discovering and exploiting web and API vulnerabilities independently.
• Experience with Web3 and blockchain security, including understanding common risks like smart contract reentrancy attacks, flash loan exploits, signature forgery, and cross-site vulnerabilities in DApps; prior expertise in Solidity code auditing or testing of DApps and wallets is highly desirable.
• Proficiency with security scanning and testing tools such as Burp Suite, Slither, Mythril, and Checkmarx, combined with the ability to develop automation scripts in Python or Go.
• Strong communication and collaboration skills to facilitate effective coordination with development teams for timely vulnerability mitigation.