[Hiring] Security Engineer @Stacks Labs

Role Description

We find our vulnerabilities before anyone else does. You hunt through code, infrastructure, and deployments with an attacker's mindset. The things you find get triaged, remediated, fixed.

• Security that ships as code: Your work produces pull requests, hardened configs, detection rules, and tests. Engineers see you as someone who makes their systems better, not someone who slows them down.
• A hardened perimeter where it matters: Key custody, secrets management, access control, CI/CD, and the software supply chain are locked down against the realistic threats to a system securing crypto-assets.
• An AI-augmented security practice: LLMs and coding agents multiply your reach across code review, fuzzing, triage, and log analysis. You know exactly where they help, where they lie, and how to build systems that leverage them to scale things up.
• Calm, rehearsed incident response: When something goes wrong there's a playbook, a clear owner, and a blameless postmortem that leaves the system stronger than before.

Qualifications

• Security is what you do for fun, not just for work.
• CTFs, bug bounties, side research, reading advisories at breakfast.
• 5+ years in software engineering and a meaningful portion of it in security.
• Solid programming foundation: You read and write production code (Rust, Go, C, TypeScript, Python, or similar), and you understand systems, networking, and cryptography.
• Hands-on offensive or defensive experience: exploit development, pentesting, incident response, detection engineering, or hardening production systems.
• Pragmatism: You measure yourself in closed attack paths and shipped fixes.
• Fluency with AI tooling: You use LLMs and coding agents daily in security work.
• Strong written communication: Findings, advisories, and design reviews that people actually read and act on.
• Comfort working remotely and autonomously across time zones.

Requirements

• Expertise in Rust, our primary language.
• Bitcoin protocol internals, or experience auditing smart contracts (Clarity, Solidity, or similar).
• Threshold signatures, MPC, or applied cryptography.
• Security of distributed systems and consensus protocols.
• Cloud and infrastructure security.
• Experience building AI agents for security workflows, or securing systems that integrate LLMs.
• A public track record: CVEs, published research, notable CTF placings, or bug bounty history.

Benefits

• Competitive compensation including $160,000-$200,000 USD base salary.
• Stacks (STX) tokens - STX is the native cryptocurrency of the Stacks network.
• Comprehensive health coverage and free life and disability insurance.
• Up to 16 weeks of paid parental leave to support you through one of life's biggest transitions.
• Monthly stipends for your home office or co-working space of choice.
• Annual learning and development stipend to keep growing your skills.
• An open vacation policy, take the days you need when you need.
• 401(k) with a 3% match.
• A high-ownership role shaping some of the most critical infrastructure in the Stacks ecosystem.
• A fast-moving, focused team where strong engineering judgment is valued and where your work will ship quickly and visibly.
• The chance to define engineering standards for one of the most ambitious Bitcoin L2 ecosystems, shaping how Bitcoin moves in and out of smart contracts.
• A remote-first culture with flexibility, autonomy, and deep collaboration with product and engineering.