HHiring Reality
← RootstockLabs Ltd.

Application Security Engineer

RootstockLabs Ltd.
Location
Remote
Posted
10 days ago
Department
Security
What they actually want (must-haves)
  • 3+ years of experience in Application Security or Security Engineering
  • Solid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust
  • Hands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security
  • Experience building and operating security automation, AI-assisted workflows (LLM-based triage, code review, or scanning), SAST/DAST, dependency and secret scanning, and CI/CD security gates
  • Fluent English
Nice to have
  • Experience in bug bounty triage or vulnerability disclosure programs
  • Experience mitigating network-level attacks (p2p, eclipse, DoS) or analyzing consensus-level attack scenarios
  • Offensive security background (pentesting, red team, CTFs, exploit development)
  • Public security research: CVEs, bug bounty track record, audit reports, conference talks
  • Knowledge of C/C++ (for node/client codebases)
What the job really is

As an Application Security Engineer at RootstockLabs, you will focus on securing Bitcoin-backed DeFi infrastructure by conducting security reviews of code and smart contracts, managing a bug bounty program, and coordinating external security audits. You will also engage in threat modeling, build security automation, and support incident investigations related to application-layer issues.

Benefits
  • Competitive compensation package and unique benefits designed to support your growth and well-being
  • 100% Remote Work within a Central European to Argentinian time-zone window (UTC-3 to UTC+2)
  • Paid vacation and sick leave days
  • Access to training programs, language courses, and learning sponsorship annually
  • Work with cutting-edge blockchain technology in a global, diverse team
Things to weigh
  • No salary listed
  • Focus on blockchain security may limit exposure to other security domains
  • Remote work is limited to specific time zones (UTC-3 to UTC+2)
Job score3.6/5
Benefits3/5
Freshness5/5
Career value5/5
Role clarity5/5
Pay transparency0/5

Applying to RootstockLabs Ltd.?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →