Security Enginee
Are you a seasoned Security Engineer passionate about the future of finance and decentralized technology? Do you thrive on protecting critical systems and groundbreaking innovation? Lightning Labs is scaling rapidly, and we're seeking a **Security Engineer** to fortify our expanding engineering organization and safeguard our mission of bringing financial freedom to the world.
This is a pivotal, hands-on role where you'll not only devise robust security policies and procedures but also implement them directly, ensuring best practices across our systems. You'll be at the forefront of securing cutting-edge web, Bitcoin, and other public-facing network services, with a unique opportunity to apply your expertise to the complex and fascinating world of cryptocurrency.
We are a globally distributed team, so comfort and experience working remotely with highly collaborative, international colleagues is essential. A deep passion for Bitcoin and the Lightning Network, coupled with an understanding of their intricate cryptographic underpinnings, will be a significant advantage. While part of the engineering organization, you'll collaborate cross-functionally to embed security best practices across all aspects of our business.
What You'll Do: Design, deploy, and manage advanced security testing infrastructure, including active fuzzing, black/white box testing, and penetration testing for both open-source and internal production systems. What You'll Bring: At least 5 years of hands-on experience in systems security. Highly Desired Experience & Skills: Direct experience with Bitcoin and the Lightning Network, including knowledge of their cryptographic aspects. Candidates with additional experience are highly encouraged to apply, as we are open to adjusting the role to match exceptional talent. Join us in building the financial future, secured by your expertise!
Conduct comprehensive security audits and reviews of our internal production systems and critical open-source software interacting with Bitcoin and Lightning.
Provide expert mentorship and guidance, elevating the security acumen of your teammates.
Craft and implement global security policies, standards, guidelines, and procedures to ensure ongoing security maintenance.
Oversee the security aspects of our software release processes and core infrastructure.
Proactively determine future security team requirements to support our growth.
Develop and ensure the robust responsiveness of our security incident management processes.
Perform critical risk management assessments across our ecosystem.
Required Experience & Skills:
Proven ability to thrive in a high-impact, fast-moving startup environment.
Extensive knowledge of operating system and computer architecture internals.
Strong understanding of cryptography, protocol design, and adversarial analysis.
Experience in securing web, Bitcoin, and other public-facing network services.
Demonstrated experience in penetration testing and both automated and manual source code security reviews.
Experience working with and contributing to highly distributed, remote teams.
Experience in reverse engineering and exploiting cryptographic protocol systems, particularly cryptocurrencies like Bitcoin.
Extensive professional software development experience in Go, Rust, C/C++, and/or Java.
Experience in security incident response.
Experience in security code review and vulnerability triaging.
Prior experience running an open-source-facing bug bounty program.
2+ years of management experience or experience as a senior decision-maker.
Experience working with Kubernetes and AWS infrastructure.
Working knowledge of fundamental Bitcoin and Lightning design principles.