Lead Security Engineer

About the Company

Paxos Labs builds enterprise infrastructure that powers the next generation of trusted onchain financial products. We work with the largest financial enterprises in the world to build transparent and verifiable onchain infrastructure.

Responsibilities

• Conduct internal audits of Cloud (Azure, AWS) platform security and implement best practices
• Create threat models for first party and third party software and research vulnerabilities
• Collaborate with infrastructure engineers to detect, fix, and prevent exploits
• Develop tooling and SOPs such as incident response manuals
• Conduct periodic incident response training including simulated hacks and social engineering
• Collaborate with technical and non-technical staff to secure non-code related attack vectors
• Conduct internal audits for smart contract protocols and set up secure operational practices
• Build and deploy full stack tools for mitigating exploits and financial risks
• Detect malicious transactions in the mempool and automate pauses across smart contracts
• Define invariants and detect violations in realtime

Requirements

• Deep knowledge of cloud infrastructure and web2 security practices
• Deep knowledge of cybersecurity standards and social engineering defenses
• Experience building full stack applications
• Deep knowledge of EVM security tooling, testing, and best practices
• Deep knowledge of common hacks and exploits in DeFi protocols
• Deep knowledge of financial attack vectors in DeFi protocols
• Experience with CTFs, bugbounties, or whitehat activities