RootstockLabs Ltd. - Application Security Engineer
Requirements
• 3+ years of experience in Application Security or Security Engineering • Solid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust • Hands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security • Experience building and operating security automation, AI-assisted workflows (LLM-based triage, code review, or scanning), SAST/DAST, dependency and secret scanning, and CI/CD security gates • Experience in bug bounty triage or vulnerability disclosure programs • Experience mitigating network-level attacks (p2p, eclipse, DoS) or analyzing consensus-level attack scenarios • Offensive security background (pentesting, red team, CTFs, exploit development) • Public security research: CVEs, bug bounty track record, audit reports, conference talks • Knowledge of C/C++ (for node/client codebases) • Experience with fuzzing (smart contracts or native code)
Responsibilities
• Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects • Participate in design and architecture reviews; threat-model new products and features with development teams • Triage and validate bug bounty reports; assess severity and coordinate remediation with engineering • Collaborate on external security audits: scope engagements and work with third-party auditors through to the resolution of findings • Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines • Research attack techniques relevant to the ecosystem (EVM, bridges, p2p) and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes • Support incident investigations when application-layer issues arise
Benefits
• At RootstockLabs, we don’t just offer a job, we offer a community. Here’s what you can expect when you join us: • Competitive compensation package and unique benefits designed to support your growth and well-being. • 100% Remote Work working within a Central European to Argentinian time-zone window (UTC-3 to UTC+2, with about an hour's flexibility either side), and with access to global coworking spaces. • 100% Remote Work • Work-Life Balance: Paid vacation and sick leave days • Work-Life Balance: • Continuous Learning: Access to training programs, language courses, and learning sponsorship annually. • Continuous Learning: • Unique Projects: Work with cutting-edge blockchain technology in a global, diverse team. • Unique Projects: • RootstockLabs is a key contributor to Rootstock, Bitcoin's Financial Infrastructure for lending, yield, and onchain capital markets. We build and commercialize the institutional infrastructure that turns Bitcoin into productive capital. • What we do: Develop and commercialize Bitcoin-backed lending, tokenized real-world assets, and onchain financial strategies • Proof it works: 200+ dApps live on Rootstock, from BTCFi protocols like Sushiswap and Oku to institutional names like Mercado Bitcoin, Animoca Brands, and Paystand • Proof it works:
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT