About The Company

About the Company: 

Shardeum is building a layer 1, EVM-based, linearly scalable, smart contract platform that provides low gas fees forever while maintaining true decentralization and solid security through dynamic state sharding. Shardeum aims to be a chain capable of onboarding over a billion people to the crypto revolution, while also democratizing accessibility to decentralization.

Shardeum’s mission is supported by prominent Venture Capitalists in the blockchain space, and we are on track to become one of the most widely used and well known smart contract platforms in blockchain history.

We encourage you to browse our website, Litepaper, Discord and YouTube channel to learn more about the project. You can even try downloading our validator software and joining our Testnet.

We encourage people of all backgrounds and experience levels to apply. Your talent and potential is what matters most to us. Shardeum is committed to creating an inclusive culture.

Job Short Description

About The Role:

The Security Engineering team at Shardeum is responsible for delivering the Shardeum Mainnet safely and securely, and furthering the development of the smart contract platform, the consensus layer and the protocol layer. We focus on building scalable, performant, secure and reliable software that can be downloaded by thousands of node operators to actualize the Shardeum network.

We are in search of highly talented, innovative individuals to join our team. If you enjoy solving complex computer science problems, are passionate about what you work on, are a perfectionist who wants to build things the right way - the secure way - and are persistent about finishing what you started, then you’re the kind of person we are looking for. You will be working with equally talented and innovative individuals with the goal of building incredible software with the potential to change the world.

What You’ll Be Doing:

• Perform proactive assessments covering infrastructure, secure and resilient architecture, data security (including privacy), identity and access management, application and product security
  • Be proactive in identifying potential security flaws in code, designs, and processes, and develop strategies and tactics to resolve and mitigate exposed issues
  • NodeJS and TypeScript Code Audit: Conduct security audits on code, discover and address potential security vulnerabilities
• Aid in planning organizational security priorities
• Evaluate application architectures for security related concerns, and consult on mitigation options.
• Develop on-chain security strategies and perform security assessments and threat modeling of various blockchain protocols and smart contracts
• Develop security-related activities in the software engineering process (e.g., threat modeling, secure coding practices)
• Design and develop detection capabilities to detect known/unknown hacks in Web3
• Triage vulnerability reports, work with engineering team to develop fixes
  • Prioritize and drive the reduction of discovered security issues, vulnerabilities, and risks
• Development and/or use of Security-Related Tools
  • NodeJS and TypeScript Code Analysis: Develop and/or use analysis tools for automatic detection of potential security vulnerabilities
  • On-chain Incidents Monitoring: Develop and maintain strategies for detecting on-chain attacks, enabling real-time observation and reporting of potential security events

What We’re Looking For:

• BS/MS in Computer Science or related fields with security research experience
• Experience performing security architecture and design reviews
• Application Fuzzing and auditing experience
• Experience with Web3 security research a plus
• Good communication skills
• Knowledge of common vulnerabilities in different types of software and programming languages, including:
• How to test for/exploit them
• Real world mitigations that can be applied
• Familiarity with vulnerability classification frameworks (e.g., OWASP Top 10)
• Ability to threat model systems/applications/platforms to assess design and find flaws that can be exploited