Full-Stack Engineer (Security)
New
J
JobgetherBlockchain payments
Based in CanadaFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 4 years of software engineering experience
- Required Skills
- KubernetesTypeScriptDistributed Systems
Requirements
- Have at least 4 years of software engineering experience building, deploying, and operating production systems.
- Bring strong TypeScript skills and the ability to work across backend services, databases, APIs, and internal user interfaces.
- Have experience reviewing code and identifying potential security vulnerabilities.
- Have experience with containerized environments and Kubernetes.
- Understand queues, retries, idempotency, race conditions, concurrency, and numerical precision in distributed systems.
- Have experience building or operating fraud-prevention, wallet-screening, abuse-detection, or similar security systems.
- Be able to evaluate detection performance using verified data, precision, recall, and regression testing.
- Have practical experience analyzing transactions on EVM-compatible blockchains, including receipts, logs, block ordering, liquidity-pool mechanics, and tracing funds or wallet relationships.
- Have experience operating LLM-based automation in production, including evaluation frameworks, regression testing, and management of prompts and detection rules.
- Be able to read and assess Solidity code to determine whether automated vulnerability findings are valid and actionable.
- Have experience threat-modeling features and conducting security reviews with product teams; be familiar with identity and access management, secrets management, auditability, and safe handling of state-changing operations.
- Be comfortable participating in on-call rotations for 24/7 financial infrastructure.
Responsibilities
- Develop, operate, and improve wallet-screening services, integrating risk-intelligence providers and external data sources.
- Define transaction-screening policies and ensure blocking decisions have clear explanations, audit reports, and authorization and override mechanisms.
- Build and operate near-real-time systems to detect sandwich attacks and other MEV targeting users.
- Measure detection precision and recall, maintain regression tests, investigate attack patterns, and validate mitigations with engineering teams.
- Maintain LLM-powered auditing systems, improve finding quality, reduce false positives, and track vulnerabilities through remediation.
- Develop monitoring and alerting systems for suspicious transactions, unexpected refunds, pricing discrepancies, and other financial anomalies.
- Automate daily loss reviews and create early-warning mechanisms to help prevent movement of illicit funds.
- Investigate security incidents, document timelines and findings, and translate lessons into detection rules, automated checks, and preventive controls.
- Partner with product and engineering teams to threat-model features, review code, and implement reusable security components.
- Build, deploy, instrument, and maintain security services, including logging, monitoring, alerting, testing, and on-call support.
View Full Description & ApplyYou'll be redirected to the employer's site