Information Security Engineer, Product

Role Overview

We are seeking a passionate Product Security Engineer to help secure our core technologies and infrastructure. In this role, you'll be at the forefront of safeguarding Aptos core infrastructure and Aptos Labs products, working proactively to identify and mitigate emerging threats while ensuring systems remain resilient and trustworthy.

Key Responsibilities

• Analyze and assess novel and recurring security issues through design reviews, code audits, and penetration tests
• Design and build security tools, develop mitigations, frameworks, and hardening strategies for vulnerability prevention and detection
• Review and develop secure operational practices, and provide security guidance to engineers
• Respond to and triage reports from bug bounty programs

Minimum Qualifications

• B.S. or M.S. in Computer Science, a related technical field, or equivalent experience
• 3+ years of experience in vulnerability research and exploitation
• Experience with native development practices and common vulnerability patterns (e.g., Rust, C, etc.)
• Experience with automated security analysis tooling and frameworks (fuzzing, static analysis, etc.)

Preferred Qualifications

• Contributions to the security community (public research, blogging, talks in relevant conferences, etc.)
• Experience with virtual machines or complex runtime environments, such as MoveVM, EVM, WASM, or LLVM-based runtimes, including their security models, sandboxing, and execution isolation
• Familiarity with smart contract programming languages (extra bonus for Move), security tools, and frameworks, including formal verification

Benefits

• 100% insurance premium coverage for medical, dental, and vision for you and your dependents (US Employees)
• Equipment of your choice
• Flexible vacation time, 11 holidays, and floating company days off
• Competitive salary and protocol token grants
• 401k matching (US Employees)
• Fun and inclusive in-person and digital events