Senior Security Engineer, Product
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer owning product and protocol security for Jito’s Solana market infrastructure. Building security tooling, monitoring, audits, and protections for crypto products.
Responsibilities:
- Own product and protocol security for Jito's products
- Conduct threat modeling, secure design reviews, whitebox code reviews, and vulnerability testing
- Provide security input early enough to influence product designs
- Harden deployments across product lines, including the jito-solana deployment process
- Conduct ongoing internal audits of products
- Build onchain monitoring tooling and detections to identify probing before attacks
- Manage bug bounty operations, including triage, severity assessment, remediation tracking, and escalation
- Drive auditor findings through review, prioritization, assignment, tracking, and closure
- Perform AI-assisted security testing and continuous scanning
- Address security risks from agents and AI tooling operating inside codebases
- Manage key and asset risks, including key hygiene, hot wallets, engineering keys, multisigs, and security councils
- Report to the Head of Security and collaborate with the Enterprise Security Engineer
Requirements:
- 5+ years of professional experience, with meaningful software engineering experience before moving into security
- Software engineering background and experience building production systems
- Product or application security experience
- Proficiency in at least one systems or backend language; Rust preferred, or Go, C++, or Python
- Experience reading production codebases and building tooling
- Experience building security tooling or automation from scratch
- Experience running or contributing to a bug bounty program, or clear understanding of how to run one
- Genuine interest in AI security, including adversarial testing of agent controls
- Strong written communication
- Ability to work autonomously with high ownership on a small team
- Experience in web3, crypto, or DeFi
- Smart contract or onchain security experience preferred
- Experience with Hypernative or Blockaid preferred
- Familiarity with validator or consensus infrastructure preferred
- Experience with multisig schemes preferred
- Familiarity with hardware security modules preferred
- Exposure to trusted execution environments preferred
- Experience with fuzzing, formal verification, or property-based testing of financial logic preferred
Benefits:
- Token incentives
- Equity
- Competitive compensation
- Tools needed to do your best work
- Remote-first work arrangement
- Equal opportunity employment
Similar Jobs
Principal Security Engineer
Principal Security Engineer assessing CSP architectures and authorization packages for FedRAMP compliance. Supporting Valiant Solutions’ federal cybersecurity and IT services for government customers.
Cybersecurity Engineer, Clearance Required
Cybersecurity Engineer securing Army cloud infrastructure and maintaining RMF authorization artifacts for LMI, a federal digital solutions provider. Integrating DoD controls, vulnerability management, and DevSecOps workflows.
Técnico Seguridad Perimetral
Administrador Oracle gestionando bases de datos corporativas para Logicalis Spain, empresa de centros de datos y soluciones tecnológicas. Instalación, migración, mantenimiento y soporte de entornos Oracle empresariales.
Técnico/a de Comunicaciones – Redes, Seguridad Perimetral, SD-WAN
Técnico de comunicaciones gestionando redes corporativas, seguridad perimetral y SD-WAN para The Whiteam Consulting. Integrando infraestructuras on-premise y cloud en proyectos tecnológicos.
Security Engineer II
Security Engineer securing information systems, data, and networks for a global organization. Conducting risk assessments, audits, incident investigations, and cybersecurity tool administration.
Senior Profesional Seguridad Física
Senior Physical Security Professional leading risk, security strategy, contracts, and public-force partnerships. PAR Servicios Integrales manages supplier services for the energy sector.
Senior Security Engineer
Senior Security Engineer building security foundations for Lumos’s autonomous identity platform. Designing authorization, threat modeling, cloud security, and vulnerability response for enterprise customers.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead assessing risks across Johnson & Johnson acquisitions, divestitures, and strategic transactions. Translating technical diligence into closing, Day 1, and post-close security decisions.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead guiding pre-close diligence for Johnson & Johnson healthcare transactions. Assessing cyber risks, advising deal decisions, and preparing Day 1 security handoffs.
Senior Security Engineer
Senior Security Engineer building Python-based automation, integrations, and AI/LLM workflows. Improving SOC operations for a software development client.
IT Cybersecurity Compliance Technical Associate – Campus 2027
Cybersecurity compliance associate supporting GRC workflows, risk assessments, control reviews, and audits at Guidehouse. Assisting U.S. business-hour escalations and compliance documentation.
Senior IT Security Engineer – Security Architecture, Operations
Senior IT Security Engineer developing security architecture and operations for Hypoport’s network of technology companies. Leading monitoring, incident response, tooling and automation.
Adjunct – IT/Cybersecurity
Adjunct instructor teaching IT and cybersecurity courses at Lackawanna College, a private Pennsylvania institution. Preparing course materials, supporting students, and reporting grades.
Cybersecurity Ops Analyst
Cybersecurity Ops Analyst monitoring and investigating threats for SAIC, a defense and mission technology integrator. Operating SIEM and EDR tools across a 24/7/365 security operations center.
Cybersecurity Operations Supervisor, 3rd Shift
Cybersecurity Operations Supervisor leading SAIC’s 24/7 enterprise security response team. Managing investigations, analysts, staffing, and continuous SOC improvements on third shift.
Security Architect
Security Architect designing and assuring secure systems for NEC Software Solutions. Supporting critical public-sector services through threat modelling, governance, and security architecture.
Senior Counsel – Data Governance, Privacy, Cybersecurity
Senior Counsel guiding Cencora’s healthcare services organization on data privacy, cybersecurity, AI, and governance. Advising on regulated health data, contracts, incident response, and technology-enabled offerings.
Adjunct Faculty, Cybersecurity for Leaders and Managers
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.
Adjunct Faculty – Microsoft 365 Endpoint Administration, Cybersecurity
Adjunct faculty teaching Microsoft 365 Endpoint Administration at UMGC, an online university serving nontraditional learners. Mentoring students through asynchronous, hands-on cybersecurity coursework.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security postures. Assessing Falcon environments, recommending remediation, and resolving customer issues.