Security Engineer, Red team

Аналитика рынка

Стек

Откликнуться

Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.

Описание

Are you ready to be the first line of offense for one of the fastest-growing companies in the Cryptocurrency and Blockchain space? We're looking for an experienced Security Engineer (Red Team) to think like an adversary, break things before attackers do, and help us build a platform our users can trust with their assets. In crypto, every vulnerability has an immediate, irreversible dollar value attached. That's the bar you'll be operating at. What you'll be doing: Plan and execute offensive security engagements across our web, mobile, API, and microservice surfaces, as well as cloud infrastructure and internal systems. Perform in-depth application security assessments and penetration tests , with a focus on the attack paths that matter most in a crypto/fintech context: authentication and session handling, wallet and key management flows, transaction integrity, withdrawal and KYC bypasses, business logic abuse, and privilege escalation. Threat model new and existing products from an attacker's perspective — including custody flows, trading engines, on-chain integrations, and partner/third-party data exchanges — and turn abstract risks into concrete, testable abuse cases. Conduct manual secure code review on production codebases to find vulnerabilities that scanners miss, with particular attention to financial logic, race conditions, and trust-boundary violations. Build tooling : write robust scripts, automate offensive workflows, and create frameworks that scale red team coverage across a fast-moving codebase. Partner closely with Engineering, DevOps, Product, and external partners to triage findings, design remediations, and embed security earlier in the SDLC. Research emerging threats in Web3, mobile, and cloud — new exploitation techniques, smart contract attack patterns, DeFi exploits, supply chain attacks — and translate them into proactive testing methodologies before they hit production. Produce clear, prioritized reports and recommendations that articulate te

Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.