Application Security Engineer

Responsibilities

• Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects
• Participate in design and architecture reviews; threat-model new products and features with development teams
• Triage and validate bug bounty reports; assess severity and coordinate remediation with engineering
• Collaborate on external security audits: scope engagements and work with third-party auditors through to the resolution of findings
• Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines
• Research attack techniques relevant to the ecosystem (EVM, bridges, p2p) and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes
• Support incident investigations when application-layer issues arise
• WHAT YOU BRING
• 3+ years of experience in Application Security or Security Engineering
• Solid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust

Languages