Senior Security Engineer, Product
About The Position
Jito builds the market layer of Solana, focusing on execution, capital, and incentive infrastructure for the network's onchain economy. This includes the validator client, BAM (a framework for verifiable ordering, pre-execution privacy, and programmable blockspace), JitoSOL (a leading liquid staking token), and JTX (trading built on their market infrastructure). The team is described as lean, high-density, and focused on shipping at pace, with engineers who are critical when milliseconds matter. This role specifically focuses on product and protocol security, the interface where code interacts with real money. The position reports to the Head of Security and works alongside an Enterprise Security Engineer who handles internal infrastructure and identity. This is an engineering-heavy role, with the majority of the backlog involving code rather than policy.
Requirements
- Software engineering background with experience building production systems.
- Experience in product security, covering the full lifecycle: threat modeling, secure design review, whitebox code review, and vulnerability testing.
- 5+ years of professional experience, with a significant portion in software engineering before moving into security.
- Proficiency in at least one systems or backend language (Rust preferred; Go, C++, or Python acceptable).
- Demonstrated experience in product or application security, not solely infrastructure or compliance.
- A track record of building security tooling or automation from scratch.
- Experience running or contributing to a bug bounty program, or a clear plan for how to run one.
- Genuine interest in AI security, including adversarial testing of agent controls.
- Strong written communication skills.
- Comfortable with high ownership and working autonomously on a small team.
- Experience in web3, crypto, or DeFi.
Nice To Haves
- Smart contract or onchain security experience, particularly on Solana or another SVM chain.
- Experience with onchain monitoring tooling such as Hypernative or Blockaid.
- Familiarity with validator or consensus infrastructure.
- Experience with multisig schemes: signing policy design, quorum configuration, or key management in production.
- Familiarity with hardware security modules: integration, key lifecycle, or operational use.
- Exposure to trusted execution environments: attestation, confidential compute, or secure enclave design.
- Experience with fuzzing, formal verification, or property-based testing of financial logic.
Responsibilities
- Product and protocol security reviews: threat modeling, secure design review, whitebox code review, and influencing designs early in the process.
- Deployment hardening across product lines, including the jito-solana deploy process.
- Ongoing internal audits of their own products.
- Onchain monitoring: setting up tooling like Hypernative or Blockaid and building detections for potential attacks.
- Bug bounty operations: triage, severity assessment, remediation tracking, and escalation.
- Managing auditor findings through to closure: review, prioritization, assignment, and tracking.
- AI-assisted security testing and continuous scanning, including the security surface related to agents and AI tooling.
- Managing high-impact key and asset risks: key hygiene, hot wallet and engineering keys, multisigs, and security councils.
Benefits
- Competitive compensation including salary and token incentives.
- The tools needed to do your best work.
- A seat at the center of Solana's market infrastructure.
- Opportunity to work alongside strong engineers in the ecosystem.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
