Security Chain Engineer
Injective Foundation is the organization identified in Injective’s official legal and footer materials for the Injective finance-focused layer-one blockchain.
Funding history
Projects
About Injective Foundation
The Foundation’s canonical site presents Injective as blockchain infrastructure for finance, with financial primitives for stablecoins, real-world assets, payments, and programmable derivatives. Its developer documentation supports building on and operating the active Injective network.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build and harden the core of the Injective chain, making sure every module, upgrade and integration is safe before mainnet. You will review designs for attack vectors, audit native chain code and EVM contracts, build security tooling, write security reports and take part in incident response.
Requirements
- Minimum of 3 years' experience as a Blockchain Engineer with a security focus
- 5+ years of experience in software security
- Hands-on experience auditing DeFi protocols or blockchain core code
- Solid proficiency in Golang and/or Solidity
- Strong knowledge of Go idioms, libraries, parallel processing and security pitfalls in Go and Cosmos-SDK chains
- Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm
- Solid understanding of cryptography primitives
- Ability to write clear security reports and explain risk to technical and non-technical audiences
Responsibilities
- Execute internal security audits of Injective's Cosmos-SDK modules
- Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
- Partner with protocol engineers to build security into new features and threat-model technical and economic risks
- Build, maintain and test hardened core chain components and fix vulnerabilities in the codebase
- Develop security tooling such as fuzzers, invariant and property-based tests, static analysis and on-chain monitoring and alerting
- Review chain upgrades and pull requests for determinism, consensus safety, DoS vectors and state-machine correctness
- Write security reports and coordinate with external auditors, bug bounty researchers and partners on disclosure
- Take part in incident response and drive post-mortems and remediation
- Research and track the latest blockchain exploits and security developments
Benefits
- INJ token award
- Remote-friendly work environment with flexible hours
- Unlimited PTO
- Equipment
- Home office stipend
- Global team meetups