Job Position | Company | Posted | Location | Salary | Tags |
---|---|---|---|---|---|
Nexus | San Francisco, CA, United States | $75k - $106k | |||
Matter Labs | Remote | $90k - $125k | |||
Nexus | San Francisco, CA, United States | $94k - $210k | |||
Provable | Remote | $126k - $127k | |||
Learn job-ready web3 skills on your schedule with 1-on-1 support & get a job, or your money back. | | by Metana Bootcamp Info | |||
Celestia Labs | Remote | $166k - $183k | |||
Canvy Venture Labs | San Francisco, CA, United States | $175k - $240k | |||
Aztec | Remote | $104k - $116k | |||
O1labs | Remote | $81k - $100k | |||
Horizenlabs | Remote | $54k - $100k | |||
Polygon Labs | United States | $72k - $100k | |||
MetaWealth | Bulgaria | $86k - $90k | |||
Nexus | San Francisco, CA, United States | $84k - $110k | |||
Blockstream | Remote | $175k - $240k | |||
Nexus | San Francisco, CA, United States | $126k - $127k | |||
Nexus | San Francisco, CA, United States | $98k - $106k |
About Nexus
Nexus is building a world supercomputer by leveraging the latest advancements in AI, cryptography, engineering, and science. Our team of world-leading experts is developing and deploying the Nexus Layer 1 blockchain and Nexus zkVM (zero-knowledge virtual machine) in support of our mission to enable the Verifiable Internet.
Nexus raised $25M in Series A funding from Lightspeed, Pantera, Dragonfly, SV Angel, and more.
We are headquartered in San Francisco, and this role will be an in-person, hybrid role with the rest of the Nexus team.
We are headquartered in San Francisco, and this role will be in-person with the rest of the Nexus team.
Security Engineer
At Nexus Labs we are building a world-class security team to secure the world’s first verifiable supercomputer. You will work closely with Nexus engineers, product leads, and ecosystem developers to architect and build secure and safe systems. The ideal candidate will be hands-on-keyboard: writing code to secure infrastructure from the ground up, identifying and mitigating potential threats, and educating the broader Nexus community on best web3 security practices.
Responsibilities
Work alongside the engineering and product team to ensure a secure by design architecture for Nexus
Implement and maintain the secure infrastructure in Nexus systems
Analyze and assess novel and recurring security issues via design reviews, code audits, and penetration tests
Manage and coordinate security incident response planning and execution
Requirements
Experience writing secure, efficient, and well-documented code for infrastructure and applications, ideally involving cryptographic implementations
Threat modeling, code review, and security issue identification expertise: both for internal systems and external vendors
Experience shepherding external security vendors and audit firms
Strong communication skills, especially to translate complex security risks and concepts to both technical and non-technical audiences
Proficiency in Rust, Golang, Typescript, or equivalent
Bonus Points
Blockchain & web3 security knowledge and expertise
Prior involvement with bug bounties – as a participant or an organizer
Benefits
Competitive salary and generous equity compensation
Health insurance for employees and their dependents
Daily lunch and dinner provided at SF headquarters
Company-paid travel to events and conferences
Nexus is committed to diversity in our workforce and is proud to be an Equal Opportunity Employer (EEO).
What is Zero-knowledge?
Zero-knowledge is a concept in cryptography that allows two parties to exchange information without revealing any additional information beyond what is necessary to prove a particular fact
In other words, zero-knowledge is a way of proving something without actually revealing any details about the proof
Here are some examples of zero-knowledge:
- Password authentication: When you enter your password to log into an online account, the server doesn't actually know your password. Instead, it checks to see if the hash of your password matches the stored hash in its database. This is a form of zero-knowledge because the server doesn't know your actual password, just the hash that proves you know the correct password.
- Sudoku puzzles: Suppose you want to prove to someone that you've solved a particularly difficult Sudoku puzzle. You could do this by providing them with the completed puzzle, but that would reveal how you solved it. Instead, you could use a zero-knowledge proof where you demonstrate that you know the solution without actually revealing the solution itself.
- Bitcoin transactions: In a Bitcoin transaction, you prove that you have ownership of a certain amount of Bitcoin without revealing your private key. This is done using a zero-knowledge proof called a Schnorr signature, which allows you to prove ownership of a specific transaction output without revealing the private key associated with that output.
- Secure messaging: In a secure messaging app, you can prove to your contacts that you have access to a shared secret without revealing the secret itself. This is done using a zero-knowledge proof, which allows you to prove that you have access to the secret without actually revealing what the secret is.