[Hiring] Application Security Engineer @RootstockLabs Ltd.

Role Description

As an Application Security Engineer at RootstockLabs, you will help secure our Bitcoin-secured DeFi infrastructure by:

• Reviewing code, smart contracts, and protocol changes.
• Building the security automation that keeps our development lifecycle safe.
• Working closely with development teams on threat modeling and architecture reviews.
• Managing our bug bounty program end to end.
• Coordinating external security audits with third-party auditors.
• Researching attack techniques relevant to our ecosystem (EVM, bridges, p2p) and translating them into concrete defenses.
• Supporting incident investigations when application-layer issues arise.

Qualifications

• 3+ years of experience in Application Security or Security Engineering.
• Solid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust.
• Hands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security.
• Experience building and operating security automation, AI-assisted workflows (LLM-based triage, code review, or scanning), SAST/DAST, dependency and secret scanning, and CI/CD security gates.
• Fluent English.

Requirements

• Experience in bug bounty triage or vulnerability disclosure programs.
• Experience mitigating network-level attacks (p2p, eclipse, DoS) or analyzing consensus-level attack scenarios.
• Offensive security background (pentesting, red team, CTFs, exploit development).
• Public security research: CVEs, bug bounty track record, audit reports, conference talks.
• Knowledge of C/C++ (for node/client codebases).
• Experience with fuzzing (smart contracts or native code).

Benefits

• Competitive compensation package and unique benefits designed to support your growth and well-being.
• 100% Remote Work within a Central European to Argentinian time-zone window (UTC-3 to UTC+2, with about an hour's flexibility either side), and with access to global coworking spaces.
• Work-Life Balance: Paid vacation and sick leave days.
• Continuous Learning: Access to training programs, language courses, and learning sponsorship annually.
• Unique Projects: Work with cutting-edge blockchain technology in a global, diverse team.

Company Description

RootstockLabs builds Bitcoin-secured DeFi infrastructure that enables companies and financial institutions to offer borrowing, lending, investment, and payment solutions at global scale.

• Market: Companies, financial institutions, and their customers.
• Product: Bitcoin-secured DeFi financial products.
• Distribution: B2B2C through regulated financial institutions.

We operate at the intersection of crypto infrastructure and institutional finance, enabling compliant, scalable access to decentralized financial services powered by Bitcoin.