Security Jobs in Web3

We’re looking for a Security Engineer who thrives in high-stakes environments. In this role, you’ll work hands-on with top DeFi teams and external audit firms. You’ll develop custom tooling, monitoring systems, and security frameworks. As a company, we aim to be the place where you'll do the best work of your career. Tackle complex security challenges supported by an integrity-driven team that values deep technical expertise and relentless curiosity.

Asymmetric Research:

Asymmetric Research ("AR") is a boutique security venture focused on deep partnerships with L1/L2 blockchains and DeFi protocols in an effort to keep them safe. We specialize in four core domains of web3 security: research, engineering, incident response, and infrastructure services. We help teams fortify their smart contracts, infrastructure, and security postures against emerging threats through deep, long-term partnerships.

Culture:

AR is a fully remote organization with deep open source roots. Members of our team have shaped security programs at organizations like Google, Netflix, Mozilla, Stripe, and Jump Crypto. We pride ourselves on maintaining the highest levels of confidentiality, integrity, and professionalism.

Responsibilities:

• Design and implement security and defense-in-depth controls to prevent and limit vulnerabilities.

• Develop security tooling and developer workflows to aid in the early detection of vulnerabilities.

• Collaborate with core contributors to conduct internal security audits.

• Shepherd external security audits with the help of leading 3rd party audit firms.

• Operate a leading bug bounty program on Immunefi.

• Develop monitoring software and custom detectors to ensure the integrity of on-chain protocols.

• Conduct on-chain investigations to determine the root cause of potential incidents.

• Collaborate with core contributors to reduce supply-chain risk.

• Work in a diverse decentralized team environment with web3 professionals.

• Clearly communicate security risks and solutions.

• Adhere to the highest standards of integrity, trust, and professionalism.

Requirements:

• Strong desire to understand how things work, and the ability to quickly absorb new information.

• Strong familiarity with multi-chain messaging protocols and asset bridging.

• Proven experience as a consultant, engineer, bug bounty hunter or auditor.

• Prior experience working with open source development practices.

• Willingness and aptitude to work with multiple runtimes including EVM, SVM, NEAR, Cosmos & Move.

• Experience with reverse engineering and/or fuzzing.

• Experience with code reviews.

• Prior leaderboard ranking on bug bounty platforms or strong performance in code contests or CTF competitions.

Benefits:

• 25 days paid vacation

• Office and equipment stipend

• Pension / 401K programs

• Life insurance

• Premium healthcare

• Competitive base salary

• Lucrative bonus programs