Senior Security Engineer
The crypto wallet for everyone
Projects
About Phantom
Phantom is a thoughtfully designed, easy-to-use multichain wallet created to make crypto simple and accessible for everyone. Founded in January 2021 by a group of engineers, designers, and former founders, Phantom aims to make interacting with crypto an enjoyable experience through great design and thoughtful product experiences. Key features include an in-app token swapper, launched in June 2021, which has processed over $1B in swap volume, and social features like usernames and profiles to facilitate connecting and transferring money. The company's ambition is to onboard the world to Web3 and build the world’s biggest consumer finance platform.
Skills
About the Role
You will perform regular security assessments of projects, infrastructure, and code to identify, exploit, and mitigate vulnerabilities. You will conduct manual testing and use automated tools, perform threat modeling, and produce detailed reports. You will work with development teams to implement secure coding practices and verify cryptographic integrity, participate in incident response, and lead cross-team security projects.
Requirements
- 7+ years of experience in offensive security techniques with focus on blockchain technology and cryptography
- Strong understanding of security risks and vulnerabilities in web and mobile applications
- Proficient in code review for JavaScript and TypeScript
- Experience writing proof of concepts to demonstrate vulnerabilities
- Familiarity with manual testing, automated security tools, threat modeling and threat intelligence
- Strong analytical and problem-solving skills
- Good verbal and written communication skills
Responsibilities
- Perform regular security assessments on new projects, infrastructure and code
- Identify and mitigate security vulnerabilities in code, systems and networks through manual testing and automated tools
- Conduct threat modeling and incorporate threat intelligence into assessments
- Write detailed reports of findings and present them to management and technical teams
- Work with development teams to implement secure coding practices and ensure integrity of cryptographic functions
- Participate in incident response and incident management activities
- Lead large cross-team security projects
- Develop and validate proof of concepts to demonstrate vulnerabilities
Benefits
- Equity
- Comprehensive medical insurance 100% covered
- Comprehensive dental insurance 100% covered
- Comprehensive vision insurance 100% covered
- Remote setup stipend
- Flexible hours
- Supportive remote environment
- Unlimited vacation
- 401(k) retirement plan
- Monthly wellness benefit
- Weekly meal benefit
- Global off-sites