Security Engineer

Stacks Labs

61d•$160,000 - $200,000•Remote

About The Position

We are seeking a Security Engineer who will be responsible for finding vulnerabilities before anyone else, ensuring security ships as code, hardening the perimeter, augmenting the security practice with AI, and maintaining calm, rehearsed incident response. The role involves threat modeling, building and running fuzzing harnesses, coordinating audits, developing detection and monitoring capabilities, hardening systems, supporting incident response, reviewing pull requests, and building AI-driven security tooling. The ideal candidate is passionate about security, has significant experience in software engineering and security, possesses strong programming skills, and is fluent with AI tooling.

Requirements

Security is a passion, demonstrated through CTFs, bug bounties, side research, or reading advisories.
5+ years in software engineering with a significant portion in security (Red team, Blue team, AppSec, Detection Engineering, or Security Research).
Solid programming foundation: read and write production code (Rust, Go, C, TypeScript, Python, or similar).
Understanding of systems, networking, and cryptography.
Hands-on offensive or defensive experience: exploit development, pentesting, incident response, detection engineering, or hardening production systems.
Pragmatism: measured by closed attack paths and shipped fixes.
Fluency with AI tooling: daily use of LLMs and coding agents in security work, experience building with them, and grounded opinions on their failure modes.
Strong written communication skills for findings, advisories, and design reviews.
Comfort working remotely and autonomously across time zones.

Nice To Haves

Expertise in Rust, the primary language.
Bitcoin protocol internals, or experience auditing smart contracts (Clarity, Solidity, or similar).
Threshold signatures, MPC, or applied cryptography.
Security of distributed systems and consensus protocols.
Cloud and infrastructure security.
Experience building AI agents for security workflows, or securing systems that integrate LLMs.
A public track record: CVEs, published research, notable CTF placings, or bug bounty history.

Responsibilities

Threat model and attack software, infrastructure, and contracts.
Write exploits against own systems before adversaries do.
Build and run fuzzing, property-based, and adversarial test harnesses.
Run internal red-team exercises and coordinate external audits and bug bounty programs, triaging and validating what comes back.
Develop detection and monitoring capabilities to identify compromises quickly.
Harden hosts, CI/CD, and the software supply chain.
Audit dependencies and design reproducible builds and signed/attested releases.
Support incident response and post-incident reviews.
Review security-sensitive PRs across the codebase and pair with engineers on secure design.
Build AI-driven security tooling: agents for code review and dependency triage, LLM-assisted log analysis, automated first-pass audits of new contracts and integrations.
Write clear, actionable findings and advisories for internal teams, external signers, and partners.