Security Chain Engineer (Injective Labs)

Injective is hiring a Security Chain Engineer to secure and strengthen the core of the Injective blockchain. The role audits chain code, smart contracts, and integrations; builds security tooling and hardened components; and supports threat modeling, incident response, and vulnerability remediation.

Responsibilities:

• Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
• Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
• Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling both technical and economic risks (e.g. oracle manipulation, MEV, liquidation and market-manipulation attacks)
• Build, maintain, and test hardened core components of the chain (consensus, state management, financial infrastructure), and fix vulnerabilities directly in the codebase
• Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
• Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
• Write clear, high-quality security reports, both internal and public, and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure
• Take part in incident response, and drive post-mortems and remediation when issues arise
• Research and track the latest blockchain exploits and security developments, and share learnings with the wider team

Requirements:

• Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security
• 5+ years of experience in software security
• Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
• Solid understanding and proficiency of Golang and/or Solidity
• Strong knowledge of Go idioms, libraries, and parallel processing, plus the security pitfalls common in Go and Cosmos-SDK chains (non-determinism, panics, unbounded iteration, gas and DoS issues)
• Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm contract platform
• Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos
• Ability to write clear security reports and explain risk to both technical and non-technical team members
• A track record in bug bounties, CTFs, or published audits and CVEs
• Experience with fuzzing and formal verification tools
• Prior experience working in trading or at an exchange
• Knowledge of financial instruments and markets