Security Chain Engineer

As a Security Chain Engineer at Injective Labs, you join the protocol team to build and harden the core of the Injective chain, a fast-growing Cosmos-based blockchain optimized for decentralized finance. You will work alongside protocol engineers from spec to release, reviewing designs for attack vectors, auditing native chain code and EVM contracts, and building tooling that keeps the chain secure over time. You'll work autonomously with a strong security mindset, thinking like an attacker while building like an engineer.

What you'll do

• Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
• Review and audit EVM smart contracts, EVM integrations, cross-chain bridge and IBC components
• Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling both technical and economic risks such as oracle manipulation, MEV, liquidation and market-manipulation attacks
• Build, maintain, and test hardened core components of the chain including consensus, state management, and financial infrastructure, and fix vulnerabilities directly in the codebase
• Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
• Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
• Write clear, high-quality security reports, both internal and public, and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure
• Take part in incident response, and drive post-mortems and remediation when issues arise
• Research and track the latest blockchain exploits and security developments, and share learnings with the wider team

What you bring

• Minimum 3 years of experience as a Blockchain Engineer with a significant focus on security
• 5+ years of experience in software security
• Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
• Solid understanding and proficiency in Golang and/or Solidity
• Strong knowledge of Go idioms, libraries, and parallel processing, plus the security pitfalls common in Go and Cosmos-SDK chains such as non-determinism, panics, unbounded iteration, gas and denial-of-service issues
• Strong knowledge of blockchain, DeFi and DEX concepts, consensus mechanisms, and CosmWasm contract platform
• Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos
• Ability to write clear security reports and explain risk to both technical and non-technical team members

Nice to have

• A track record in bug bounties, CTFs, or published audits and CVEs
• Experience with fuzzing and formal verification tools
• Prior experience working in trading or at an exchange
• Knowledge of financial instruments and markets

What we offer

• Competitive salary and INJ token award
• Remote-friendly work environment with flexible hours
• Unlimited PTO
• Equipment and home office stipend
• Global team meetups

About Injective Labs

Injective Labs is the core contributor to Injective, one of the fastest growing blockchains in the industry. Injective is an interoperable smart contracts platform optimized for building decentralized finance applications, natively integrated with Ethereum, Cosmos and Solana, and featuring the world's first fully on-chain order book. Incubated by Binance and backed by leading firms including Jump Crypto, Pantera and Mark Cuban, the team brings decades of experience from the largest financial institutions and tech organizations.