About the role:
Injective is seeking a Security Engineer to help strengthen and future-proof the security of our blockchain ecosystem and core infrastructure. This role blends hands-on security engineering with proactive research — you’ll identify and mitigate vulnerabilities, run offensive security campaigns, and help shape Injective’s reputation as one of the most secure ecosystems in Web3.
Responsibilities:
- Perform regular security reviews, penetration tests, and code audits across our chain modules, smart contracts, validator infrastructure, and supporting services.
- Hunt for new vulnerabilities through fuzzing, adversarial testing, and exploit development — at the protocol, network, and application layers.
- Develop internal tools to detect misconfigurations, suspicious activity, and chain-level edge-case exploits.
- Analyze emerging threats in other blockchains, rollups, bridges, or validator networks — assess Injective’s exposure, propose mitigations, and publish findings internally.
- Manage vulnerability scanning pipelines, patch management, and incident response processes.
- Audit internal systems and services (cloud accounts, access control, VPN, GitHub, secrets, endpoints, MDM, etc.) for best practice alignment
- Collaborate with core developers, validators, and external auditors to test, validate, and deploy security fixes.
- Contribute to our bug bounty program and coordinate with the security research community for responsible disclosure.
- Help define and enforce internal security policies, tooling, and education to raise baseline awareness
Who You Are
- 5+ years of experience in security engineering, offensive security, or protocol-level system audits
- Strong experience in security engineering for cloud-native or blockchain-based systems.
- Solid understanding of offensive security: vulnerability discovery, fuzzing, static/dynamic analysis.
- Strong pen-testing experience
- Experience working with or auditing blockchain protocols, validator setups, or smart contracts
- Hands-on experience securing distributed infrastructure (Linux, containers, Kubernetes, cloud networks).
- Familiarity with blockchain architectures (Cosmos SDK, Tendermint, IBC, EVM, CosmWasm, or cross-chain bridges).
- Proficiency in Go or Rust (protocols) is a must.
- Experience with Solidity/CosmWasm (smart contracts) is a plus
- Comfortable writing PoCs, threat models, or simple fuzzers to validate real-world risk.
- Self-driven, curious, and motivated to think like an attacker and design like a defender.
Bonus Points:
- Experience with Cosmos SDK, IBC, or Injective chain tooling
- Involvement in open-source security research, bug bounties, or CTFs
Why Work With Us:
- Work on high-impact security challenges at the forefront of decentralized finance
- Collaborate with a global team of protocol engineers, devops engineers, and Web3 pioneers
- Competitive compensation, generous token incentives, and flexible remote work
Injective Labs
Remote