Security Engineer

Job Summary

Seeking a hands-on Security Engineer, the full-time remote position will manage bug bounty programs, oversee audit engagements, and enhance software supply chain security while ensuring the protection of products and users across the Sui ecosystem.

Key responsibilities

• Run bug bounty programs, including triage, severity assessments, and internal escalations
• Own audit engagements by scoping and scheduling external audits and tracking findings through remediation
• Conduct code and design reviews, driving issues to resolution and ensuring comprehensive vulnerability coverage

Required qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or a relevant technical field, or equivalent practical experience
• 3+ years of hands-on experience in security engineering or application security with a proven track record of identifying vulnerabilities
• Strong Web2 security fundamentals, including knowledge of XSS, CSRF, and software supply chain failures
• Proficiency in Rust, TypeScript, Python, or Move, with experience in reviewing and writing security-sensitive code
• Hands-on knowledge of software supply chain attack surfaces and applied cryptography fundamentals