Aptos

Information Security Engineer, Product

Rol remoto de Infosec con fit claro de ubicación del candidato.

Publicado22 jul 2026

Países elegibles1 país aceptado

Señal de seniorityMiddle

Modelo de trabajoRemoto

Ubicaciones aceptadas para candidatos

Estados Unidos

Resumen del rol

Contenido del rol extraído en secciones para revisar más rápido.

Analyze and assess novel and recurring security issues via design reviews, code audits, and penetration tests.
Design and build security tools, and develop mitigations, frameworks, and hardening strategies tailored for vulnerability prevention and detection.
Review and develop secure operational practices, and provide security guidance for engineers.
Respond to and triage reports from bug bounty programs.

B.S. or M.S. in Computer Science, a related technical field, or equivalent experience.
3+ years of experience in vulnerability research and exploitation.
Experience with native development practices and common vulnerability patterns (e.g., Rust, C, etc.)
Experience with automated security analysis tooling and frameworks (fuzzing, static analysis, etc.)

Contributions to the security community (public research, blogging, talks in relevant conferences, etc.)
Experience with virtual machines or complex runtime environments, such as MoveVM (extra bonus), EVM, WASM, or LLVM-based runtimes, including their security models, sandboxing, and execution isolation.
Familiarity with smart contract programming languages (extra bonus for Move), security tools, and frameworks, including formal verification.

100% insurance premium coverage for medical, dental, and vision for you and your dependents (US Employees)
Equipment of your choice
Flexible vacation time, 11 holidays, and floating company days off
Competitive Salary
Protocol Token Grants
401k matching (US Employees)
Fun and inclusive in-person and digital events

We will never ask you for payment of any kind during the application or onboarding process, including fees for background checks, training, or equipment.
We will always communicate with you using our official company email domain.
We will never request your personal financial information, such as your social security number or bank account details, during the initial application stages or via email or a video/voice call when onboarding.

Roles similares