Senior Security Engineer, Blockchain Detection

Tools for Humanity•San Francisco, CA

5d•$221,000 - $325,000

About The Position

Tools for Humanity (TFH) is seeking a Senior Security Engineer, Blockchain Detection to join their team. This role involves leveraging the Ethereum blockchain to record audit events and detect and respond to attacks on the World ID system. The World ID system utilizes an Optimism OP stack L2 chain (World Chain), Merkle trees, zero knowledge proofs, and smart contracts for its global-scale identity service. The successful candidate will work with a team of security experts to build an entirely new automated detection and response system to protect millions of World ID users and transactions, with the goal of scaling to billions of users. The role requires publishing audit events to the public blockchain for transparency while maintaining strong privacy protections. This position works closely with core technology teams to ensure security and privacy are foundational elements of the World Network.

Requirements

Proven track record of discovering blockchain-based vulnerabilities (e.g., smart contracts) or substantial, successful participation in major Capture The Flag (CTF) security competitions (e.g., DEF CON, PlaidCTF, Google CTF, etc.).
5-8 years experience developing and deploying security-related analysis (e.g. intrusion detection, security monitoring, log analysis).
2-5 years experience with and detailed understanding of the Ethereum blockchain (protocol level, transaction level).
Experience with programming and version control (esp. GitHub).
Willing to participate in an on-call rotation and learn incident handling (or relevant experience).
Strong critical thinking, communication, and leadership skills.
Comfort working cross-functionally with peer teams to negotiate and reach consensus solutions that improve security and privacy.
Energized by working in a fast-paced, collaborative environment.

Nice To Haves

Experience writing smart contract code using Solidity.
Experience with creating dashboards and analytics in SQL-based environments.
Experience deploying code to a containerized environment via CI/CD.
Experience with infrastructure, cloud, mobile (iOS/Android), or hardware security.

Responsibilities

Leverage the Ethereum blockchain to record audit events.
Detect and respond to attacks on the World ID system.
Build an entirely new automated detection and response system.
Protect millions of World ID users and transactions, with the goal of scaling to billions of users.
Publish audit events to the public blockchain for transparency.
Maintain strong privacy protections.
Work closely with core technology teams to ensure security and privacy are foundational elements of the World Network.
Participate in an on-call rotation.
Handle incidents.