Senior Security Engineer, DFINITY
Offensive Security
$175-240k
+ Bonus
Decentralized network for open apps
Be an early applicant
Decentralized network for open apps
201-500 employees
Be an early applicant
$175-240k
+ Bonus
201-500 employees
Company mission
To build, promote, and maintain the Internet Computer — the world’s first web-speed, internet-scale public blockchain.
Role
Who you are
- If you have a strong technical background, are passionate about offensive security, and enjoy working in decentralized environments, we want to hear from you
- Extensive experience planning and executing Red Team engagements in complex, distributed environments, simulating advanced persistent threats (APTs) across blockchain and traditional infrastructure
- Skilled in adversary emulation, lateral movement techniques, privilege escalation, and exfiltration tactics
- Proven experience in identifying and exploiting vulnerabilities specific to blockchain ecosystems, including distributed consensus mechanisms, smart contract execution, and inter-node communication
- Strong understanding of kernel-level vulnerabilities, hypervisor security, and virtualized environments
- Strong understanding of SELinux
- Expertise in securing Kubernetes clusters and traditional infrastructure, with a focus on container security
- Proficiency in working with QEMU virtualization technologies and AMD SEV-SNP secure enclaves is a plus
- This is a hybrid-onsite position, based out of our soon-to-be-opened office in the heart of San Francisco
What the job involves
- We're seeking an experienced Offensive Security Engineer to join our growing security team with a focus on offensive security, threat research, and exploit development. You will identify vulnerabilities, understand how they function behind the scenes, and develop patterns and tools to mitigate risks.
- Lead and design sophisticated Red Team operations targeting Internet Computer Protocol, governance, subnets, nodes, and system dApps
- Develop adversary emulation plans to test both platform and infrastructure defenses, identifying weaknesses before they can be exploited
- Research, develop, and test advanced exploits against the Internet Computer Protocol and infrastructure
- Maintain an internal repository of exploits, scripts, and tools for advanced offensive security operations
- Strengthen the security of Internet Computer Operating Systems (ICOS) running on virtual machines by implementing advanced hardening measures
- Perform vulnerability assessments and penetration tests on the ICOS environment and the overall Internet Computer infrastructure to identify and mitigate risks
- Harden and assess security for internal Kubernetes clusters and associated services, ensuring robust defense mechanisms against container-based attacks
- Perform security testing across cloud-native infrastructures, CI/CD pipelines, and microservices environments, identifying lateral movement paths and privilege escalation risks
- Build and maintain custom offensive security tools for exploit delivery, post-exploitation automation, and Red Team simulations
- Develop secure operational tools to streamline complex engagements and support security monitoring, threat detection, and incident handling
- Partner with cross-functional teams, including blockchain developers, DevOps, and infrastructure engineers, to embed security best practices throughout the development lifecycle
- Lead incident response efforts involving blockchain or internal systems, conducting thorough post-mortems and implementing mitigation strategies
- Publish security advisories and report CVEs
Our take
A not-for-profit organization committed to carrying out scientific research, DFINITY offers a multitude of services, including supporting The Internet Computer, a blockchain-based web infrastructure designed to facilitate the creation of websites and hosting of servers, amongst other tasks. DFINITY defines itself as the first frictionless, limitless blockchain in the world.
DFINITY's team is comprised of cryptographers, operational experts and computing engineers looking to push the boundaries of existing blockchain solutions. They boast an impressive number of scientific citations, demonstrating a continued commitment to advancing experimental technologies.
This public software development platform is created by independent data centers around the world combining computing power using an advanced decentralized protocol called ICP. In turn, this generational shift in computing aims to take on Big Tech and return the internet back to its free and open roots.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
23% employee growth in 12 months
Company
Funding (2 rounds)
Aug 2018
$102m
EARLY VC
Feb 2018
$61m
EARLY VC
Total funding: $163m
Company HQ
Enge, Zürich, ZH
Articles
Leadership
Dominic Williams
(Chief Scientist)Having studied at King's College London, they founded Smartdrivez, System 7, and Fight My Monster. They worked until 2016 in Digital Assets at the School of Life, having founded DFINITY in January 2015.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 1 more job at DFINITY