Staff KMS Security Engineer, Phantom

• 7+ years of experience in offensive security techniques, with a focus on blockchain technology and cryptography
• Experience working with Key Managment Services
• Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications
• Proficient in code review for JavaScript & Typescript with a strong understanding of application security threats and offensive security techniques
• Write PoC’s to prove vulnerabilities, review and ensure that patch code meets the standards set by the repository owners and maintainers
• Strong analytical and problem-solving skills
• Good verbal and written communication skills

Desirable

• As a Security Engineer, you will be responsible for identifying, exploiting and mitigating security vulnerability risks in our software applications, as well as conducting security assessments and investigations
• You will work closely with development teams to ensure that security is integrated throughout the software development lifecycle
• Join us on our mission to make the digital economy safe and easy to use for everyone
• Own critical security infrastructure/services for the company (Key Management for wallet infrastructure)
• Perform regular security assessments on new projects, infrastructure and code
• Identify and mitigate security vulnerabilities in code, systems and networks through manual testing, automated tools, threat modeling and threat intelligence
• Keep up to date with the latest offensive security techniques, application security threats, and best practices in the blockchain space, and recommend improvements to security posture
• Write detailed reports of your findings and present them to management and technical teams, and help to prevent real-world attacks
• Work with development teams to implement secure coding practices and to ensure the integrity of cryptographic functions
• Collaborate with other teams such as development and platform to ensure that security is integrated throughout the organization
• Participate in incident response and incident management activities
• Leading large cross-team projects