Security Chain Engineer

Injective Labs

2d • Remote

About The Position

Injective Labs is seeking an accomplished Chain Engineer with a security focus to join its global protocol team. The role is responsible for building and hardening the core of the Injective chain, ensuring modules, upgrades, and integrations are secure before reaching mainnet. The engineer will work with protocol engineers from specification through release, reviewing designs for attack vectors, auditing native chain code and EVM contracts, and building security tooling. The position calls for an autonomous engineer with a strong security mindset, a high degree of ownership, and the ability to think like an attacker while building like an engineer.

Requirements

• At least 3 years of experience as a Blockchain Engineer, with a significant focus on security.
• At least 5 years of experience in software security.
• Hands-on experience auditing DeFi protocols or blockchain core code, internally or externally, with findings the candidate can discuss.
• Solid understanding of and proficiency in Golang and/or Solidity.
• Strong knowledge of Go idioms, libraries, and parallel processing, as well as security pitfalls common in Go and Cosmos-SDK chains, including non-determinism, panics, unbounded iteration, and gas and denial-of-service issues.
• Strong knowledge of blockchain, DeFi and DEX concepts, consensus mechanisms, and the CosmWasm contract platform.
• Solid understanding of cryptographic primitives, including digital signatures and hash algorithms used by Ethereum and Cosmos.
• Ability to write clear security reports and explain risk to technical and non-technical team members.

Nice To Haves

• Track record in bug bounties, CTFs, or published audits and CVEs.
• Experience with fuzzing and formal verification tools.
• Prior experience working in trading or at an exchange.
• Knowledge of financial instruments and markets.

Responsibilities

• Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment.
• Review and audit EVM smart contracts, EVM integrations, cross-chain bridge components, and IBC components.
• Partner with senior protocol engineers to incorporate security into new chain features from the outset and threat-model technical and economic risks, including oracle manipulation, MEV, liquidation, and market-manipulation attacks.
• Build, maintain, and test hardened core chain components, including consensus, state management, and financial infrastructure, and fix vulnerabilities directly in the codebase.
• Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting.
• Review chain upgrades and pull requests for determinism, consensus safety, denial-of-service vectors, and state-machine correctness.
• Write clear internal and public security reports and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure.
• Take part in incident response and drive post-mortems and remediation when issues arise.
• Research and track blockchain exploits and security developments and share learnings with the wider team.

Benefits

• Competitive salary and INJ token award.
• Remote-friendly work environment with flexible hours.
• Unlimited PTO.
• Equipment.
• Home Office Stipend.
• Opportunity to work on cutting-edge blockchain technology in the finance industry.
• Collaborative team culture with opportunities for professional growth and development.
• Global team meetups.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed