Senior Security Engineer (Remote)

Position Overview

• Location Type: Remote
• Employment Type: Full-Time
• Salary: Not provided

Lightning Labs is seeking a Security Engineer to contribute to the ongoing scaling of our growing engineering organization. This is a hands-on role focused on devising and implementing policies and procedures around best practices in systems security. The ideal candidate possesses experience securing web, Bitcoin, and other public-facing network services, penetration testing, and both automated and manual source code security reviews. Due to our domain, experience with Bitcoin and the Lightning Network is highly desirable, alongside knowledge of the cryptographic aspects involved. As an international organization, experience and comfort working with distributed teams are essential. A passion for our mission of bringing financial freedom to the world, and for Bitcoin as a whole, is also valued. This role will collaborate across functional teams to ensure all aspects of the business are appropriately considered and covered by security best practices.

Requirements

• At least 5 years prior experience in systems security.
• Ability to work with a high-impact, fast-moving startup team.
• Extensive knowledge of operating system and computer architecture internals.
• Strong understanding of cryptography, protocol design, and adversarial analysis.
• Experience in reverse engineering and exploiting cryptographic protocol systems (e.g., cryptocurrencies like Bitcoin).
• Extensive expertise with professional software development experience in Go, Rust, C/C++, and/or Java.
• Experience in security incident response.
• Experience in security code review and vulnerability triaging.
• Prior experience running an open-source facing bug bounty program.
• 2+ years of management experience or experience as a senior decision maker.
• Experience working with remote teams.
• Experience working with Kubernetes and AWS infrastructure.
• Working knowledge of fundamental Bitcoin and Lightning design principles.

Responsibilities

• Designing and deploying active fuzzing, black+white box testing, and penetration testing infrastructure for open-source and production systems.
• Performing security audits and reviews of both internal production systems and open-source software interacting with Bitcoin+Lightning in a security-critical manner.
• Providing mentorship and guidance to level up teammates.
• Creating global security policy, standards, guidelines, and procedures to ensure ongoing maintenance of security.
• Overseeing security aspects of software release processes and infrastructure.
• Determining security team requirements for future growth.
• Developing and ensuring responsiveness of security incident management processes.
• Performing risk management assessments.

Application Instructions

• Not provided

Company Information

• Company: Lightning Labs
• Mission: Bringing financial freedom to the world through Bitcoin.
• Domain: Bitcoin and the Lightning Network