MLabs

Product Security Engineer

Rol remoto de Product Security Engineering con fit claro de ubicación del candidato.

Publicado3 jul 2026

Países elegibles57 países aceptados

Señal de senioritySenior

Modelo de trabajoRemoto

Ubicaciones aceptadas para candidatos

AlbaniaAustraliaAustriaBangladésBielorrusiaBélgica+51 más

Puedo aplicar realmente?Revisa la lista de países

Las ubicaciones aceptadas para candidatos están listadas (57).

Actualidad de la fuente3 jul 2026

Fit de ubicación57 países aceptados

Match de stackCI/CD, Java

Camino de aplicaciónSitio de la empresa

Resumen de fit de MiraPor qué vale revisar este rol

Fit de ubicación57 países aceptadosAgrega tu país

Match de stackAgrega skills al perfil para compararCI/CD, Java

Señal de senioritySeniorDefine tu nivel para una revisión más precisa.

Preparación para aplicarSitio de la empresaLa aplicación continúa en el sitio de la empresa.

Aplicación

Aplicar en el sitio de la empresa

Aplicación externa

Aplicando aProduct Security EngineerMLabs

Fit de país57 países aceptados

Camino de aplicaciónSitio de la empresa

WithMiraGuarda o suscríbete antes de salir

Aplicación de la empresa

WithMira mantiene este rol para descubrimiento. La aplicación continúa en el sitio de la empresa.

Resumen del rol

Contenido del rol extraído en secciones para revisar más rápido.

Security Assessments & Threat Modeling: Conduct end-to-end security assessments of blockchain-based systems, spanning cryptographic primitive design, protocol architecture, smart contract implementation, and deployed infrastructure. Own threat modeling and security architecture reviews across all product phases.
Vulnerability Discovery & Exploitation: Identify real-world vulnerabilities through rigorous hands-on code reviews, adversarial testing, and the development of proof-of-concept exploits for native services, EVM-compatible contracts, cross-chain bridges, and consensus-layer components.
Engineering Partnership: Partner directly with core engineering teams to translate complex cryptographic and protocol-level risks into prioritized, actionable remediation workflows. Define and enforce security gates prior to production deployment.
Security Automation & Tooling: Build, scale, and improve security tooling, fuzzing infrastructure, and CI/CD security automation to maximize security coverage efficiently.
Research & Mitigation: Track emerging blockchain and Web3 attack patterns, map them to the internal codebase, and drive proactive mitigation strategies.

Proven track record of hands-on vulnerability discovery and security testing across blockchain protocols, smart contracts, nodes, and APIs, with a demonstrated ability to identify deep architectural bugs beyond automated scanning.
Strong threat modeling and security architecture review experience applied directly to distributed cryptographic systems.
Direct experience assessing cross-chain protocols, threshold signature schemes, or other cryptographic systems with complex trust assumptions, including the auditing or breaking of cross-chain bridges.
Deep working knowledge of applied cryptography (e.g., BLS signatures, pairing-based schemes, polynomial commitments, and Fiat-Shamir constructions) and the ability to reason about cryptographic failure modes in production environments.
Ability to analyze trust model tradeoffs, including state proof, multisig, and oracle attestation models, and evaluate their impact on the broader attack surface.

Mastery of blockchain security and secure coding practices across both EVM-compatible and non-EVM chains.
Proficiency with security testing tooling, including static analysis, dynamic analysis, and fuzzing, alongside experience developing custom fuzzing harnesses or security test infrastructure.
Strong ability to read, review, and audit cryptographic code written in Rust and/or Java.
Clear understanding of memory safety, constant-time correctness, secret handling, and the unique security risks at JNI boundaries.

Experience designing and operating grammar-aware fuzzing campaigns against gRPC, JSON-RPC, or protocol-level endpoints.
Experience building classifier pipelines to isolate security signals from noise, or building custom security automation tooling.
Prior security work focused on Ethereum consensus clients or production threshold signature systems.
Experience integrating AI-assisted workflows into security review and triage processes.

Competitive salary and compensation package.
Opportunity to work at the forefront of enterprise Web3 infrastructure and cryptographic innovation.
Collaborative, high-caliber engineering environment focused on solving complex, large-scale distributed systems challenges.
Flexible working arrangements and comprehensive professional growth opportunities.

Roles similares