Application Security Engineer - Remote

Overview

Eigen Labs is more than just a leading name in the blockchain space. We’re the driving force behind EigenLayer, a game-changing solution that revolutionizes crypto-economic security. Imagine a world where blockchain projects break free from the shackles of the scaling trilemma and capital limitations.

We’re building a platform to deliver security to novel distributed applications. In today's blockchain ecosystem, each service is typically secured by its own tokenized trust-network. With EigenLayer, services can build upon the established security of the Ethereum trust network, unlocking untold scalability while maintaining security and decentralization.

In Short

• Conduct comprehensive design reviews, threat modeling, and code reviews for new features and products.
• Identify gaps in our software development process and take initiative leading efforts to address them.
• Educate and train the engineering teams on secure coding best practices.
• Investigate vulnerabilities reported via our bug bounty platform, determining their root cause and severity.
• Identify vulnerabilities to enable quick action by the engineering team.

Requirements

• 3+ years of experience building and securing software.
• Interest or existing experience in web3.
• Strong understanding of web application security, including OWASP Top 10 vulnerabilities.
• Familiarity with DevSecOps and CI/CD best practices.
• Proficiency in TypeScript, Golang application development.
• Knowledge of cloud security, including AWS.
• Proven experience in security design reviews, threat modeling, or security testing.
• Excellent written and verbal communication skills.

Benefits

• Competitive salary and equity (tokens and options).
• Comprehensive insurance (medical/dental/vision).
• Stipend for your ideal remote set-up.
• Flexible hours and a supportive remote environment.
• Unlimited vacation: Take time when you need it (and we really mean it!).
• 401(k) retirement plan.
• Monthly wellness benefit.
• Yearly off-sites.