Senior Staff Security Engineer DeFi
Skills
About the Role
You will own the end to end design of the signing regime including signer composition thresholds and pre signature verification workflows for destination calldata and state change confirmation. You will manage the canonical address and contract allowlist system and infra that manages it ensuring every whitelisting or approval action is checked pre signature with documented review. You will operate and tighten real time monitoring across wallets custodians and DeFi positions and align with SOC 2 incident response workflows. You will run independent technical reviews of new protocol integrations and keep the risk register current as positions and dependencies evolve. You will continuously verify ERC-20 approval hygiene across the treasury and partner with Finance on automated reconciliation between on chain activity and accounting systems. You will produce documentation of controls tooling and decisions for auditors underwriters and institutional counterparties.
Requirements
- Mastery of Solidity and the EVM you can read arbitrary contracts and raw calldata
- Deep practical experience with Gnosis Safe Coinbase Prime Anchorage Fireblocks
- Strong knowledge of DeFi protocols such as Aave Morpho Stargate including risk parameters oracle structures and bridge message passing
- Security first mindset with vigilance and commitment to safety standards
- Proven ability to explain technical risks to non technical stakeholders and produce audit grade documentation
Responsibilities
- Own the end to end signing regime design include signer composition thresholds and pre signature verification workflows for destination calldata and state change confirmation
- Manage the canonical address and contract allowlist system and infra ensuring every whitelisting or approval action is checked pre signature with documentation
- Operate and tighten real time monitoring across wallets custodians DeFi positions and SOC 2 incident response playbooks and risk scenarios
- Run independent technical reviews of new protocol integrations and keep the risk register current as positions and dependencies evolve
- Continuously verify ERC-20 approval hygiene across the treasury and collaborate with Finance on automated reconciliation between on chain activity and accounting systems
- Document controls tooling and decisions for auditors underwriters and institutional counterparties
Benefits
- Flexible remote friendly work environment
- Opportunities for personal growth and learning