Information Security Engineer, Product

Role Overview

Aptos Labs is looking for a Product Security Engineer to help secure its core infrastructure and products. You will identify and mitigate emerging threats, partner with developers to influence security best practices, and lead initiatives that shape the future of web3 security.

Responsibilities

• Analyze and assess security issues (novel and recurring) via:
  • Design reviews
  • Code audits
  • Penetration tests
• Design and build security tools and develop:
  • Mitigations
  • Frameworks
  • Hardening strategies for vulnerability prevention and detection
• Review and develop secure operational practices; provide security guidance to engineers
• Triage and respond to reports from bug bounty programs

Requirements (Minimum Qualifications)

• B.S. or M.S. in Computer Science or related technical field (or equivalent experience)
• 3+ years experience in vulnerability research and exploitation
• Experience with native development practices and common vulnerability patterns (e.g., Rust, C, etc.)
• Experience with automated security analysis tooling/frameworks (e.g., fuzzing, static analysis)

Preferred Qualifications

• Contributions to the security community (public research, blogging, talks)
• Experience with virtual machines / complex runtimes (bonus for MoveVM) including:
  • Security models
  • Sandboxing
  • Execution isolation
• Familiarity with smart contract languages (bonus for Move) and security tools/frameworks, including formal verification

Benefits (Highlights)

• 100% insurance premium coverage (medical/dental/vision for US employees and dependents)
• Equipment of your choice; flexible vacation and 11 holidays
• Competitive salary; protocol token grants; 401k matching (US)
• Inclusive in-person and digital events