Offchain Labs - Senior Security Engineer (Offensive)
Requirements
• 5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field. • Extensive experience with conducting code audits to identify and remediate security issues. • Experience with binary exploitation. • Mastery of AWS & specific attack techniques and configuration weaknesses. • Strong understanding of adversary tactics and frameworks like MITRE ATT&CK. • In-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories. • Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks. • Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation. • Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations. • A natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems. • Nice-to-haves • Web3 / blockchain security exposure: smart contract auditing, bug bounty hunting (e.g., Immunefi, Code4rena), or DeFi protocol review. • Familiarity with Ethereum L1 / L2 node architecture and security risks. • Experience in blockchain infrastructure penetration testing. • Attention Offchain Job Seekers: • This role cannot be performed in California, or Colorado. • Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email [email protected] • At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.
Responsibilities
• Conduct comprehensive code audits across a variety of internal applications and infrastructure. • Conduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications. • Collaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality. • Build, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed. • Offer offensive security expertise during incident investigations, including log analysis and root cause reviews. • Keep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community. • Own offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange.
Benefits
• Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today. • Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack. • Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure. • To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly. • Remote-first global workforce + NY office • Annual company offsite + team onsites • Professional reimbursement program (facilitates industry conference attendance, certifications, and more) • Medical, dental & vision coverage (US + some other countries) • 401k retirement plan + company match (US only) • Wellness stipend • Attention Offchain Job Seekers: • This role cannot be performed in California, or Colorado. • Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email [email protected] • At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT