- Conduct threat modeling, secure design reviews, whitebox code reviews, and vulnerability testing across products and protocols.
- Harden deployments across product lines, including the jito-solana deploy process.
- Run ongoing internal audits of Jito products.
- Set up onchain monitoring tooling and build detections for probing and attacks.
- Operate bug bounty processes, including triage, severity assessment, remediation tracking, and escalation.
- Drive auditor findings through review, prioritization, assignment, tracking, and closure.
- Build AI-assisted security testing and continuous scanning, including testing the security surface of agents and AI tooling in codebases.
- Address high-impact key and asset risks, including key hygiene, hot wallets, engineering keys, multisigs, and security councils.
PythonC++Go+1 more