SecOps Engineer
A liquid staking solution that allows users to stake tokens while maintaining liquidity through stTokens that can be used across DeFi.
Investors
Projects
About Lido
Lido is a self-custodial liquid staking protocol governed by the Lido DAO that provides liquidity for staked assets. Users who stake with Lido receive stTokens (like stETH) that represent their staked position plus accrued rewards. These tokens can be used throughout DeFi while still earning staking rewards. Lido also features a decentralized validator set and security through distributed node operators chosen by the DAO.
Skills
About the Role
You will help the DAO integrate security into development processes, manage incidents, and collaborate with teams. You will develop response plans, conduct assessments, and ensure effective communication of security practices. Essential skills include technical security assessments, programming, and strong communication abilities, with blockchain and DevOps experience being advantageous.
Requirements
- Experience with technical security assessments, code audits, design reviews, and vulnerability research.
- Proficiency in programming languages (Python, Golang, JavaScript, Bash).
- Experience with security tools and technologies (SIEM, IDS/IPS, vulnerability scanners, automated security testing).
- Excellent communication skills to articulate security concepts to technical and non-technical stakeholders.
- Strong problem-solving abilities for security investigations and risk assessments.
- English level: B2+
- Experience with blockchain technologies, Ethereum-based networks, web3 bug hunting, and contract analysis.
- Familiarity with DevOps practices and tools (Docker, Kubernetes, GitHub Actions, Git, Ansible, Terraform).
- Experience with supply chain attacks analysis and prevention.
- Focus on improving real-world security, not compliance.
Responsibilities
- Develop secure systems to protect Lido Protocol, DAO, applications, contributors, partners, and stakers.
- Define processes, systems, and applications to make attacks difficult to execute and easy to detect.
- Embed security practices and tools within the development pipeline.
- Develop and maintain incident response plans and playbooks.
- Perform regular vulnerability assessments and penetration testing.
- Lead or participate in incident response activities, including investigation, containment, eradication, and recovery.
- Monitor security alerts and incidents to identify and respond to threats promptly.
- Collaborate with development and operations teams to ensure security is incorporated from design to deployment and maintenance.
- Provide training and support on security tools and techniques, emphasizing soft skills like communication, negotiation, and influence.
