Information Security Engineer, Product

About the role:

As a Security Engineer at Aptos Labs, you will play a critical role in ensuring the security and integrity of the Aptos ecosystem. You will be responsible for proactively identifying and mitigating security risks in Aptos core infrastructure and Aptos Labs products and services by conducting design reviews, code audits, penetration tests, and overseeing bug bounty programs. Your expertise in vulnerability detection and prevention will be invaluable as you collaborate with developers to create and adopt security-focused tools and frameworks. You will also be a valuable resource for all our engineering teams, providing guidance and training on security best practices to help safeguard our ecosystem. You will have the opportunity to contribute to the security community and shape the future of the web3 landscape.

What you’ll be doing: 

• Analyze and assess novel and recurring security issues via design reviews, code audits, penetration tests and bug bounty programs.
• Build and prototype security tools, exploit mitigations, frameworks and hardening strategies tailored for vulnerability detection and prevention.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.

What we’re looking for:

• B.S. or M.S. in Computer Science, a related technical field, or equivalent experience.
• Experience in vulnerability research and exploitation
• Familiarity with native and web programming languages, development practices, and common bug patterns (we use a lot of Rust and TypeScript, Pulumi, Terraform, and Helm)
• Familiarity with analysis tooling and frameworks (fuzzing, static analysis, flamegraph, etc.)
• Contributions to the security community (public research, blogging, presentations, etc.) preferred
• Familiarity with web3 programming languages (Move, Solidity, etc.), security tools and frameworks, including formal verification preferred.