Security Chain Engineer

Injective Labs is hiring a Security Chain Engineer to secure and strengthen the core of its blockchain protocol. The role focuses on auditing chain modules, smart contracts, and integrations, building security tooling, hardening core components, and coordinating security reviews and incident response.

Responsibilities:

• Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment
• Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components
• Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling both technical and economic risks (e.g. oracle manipulation, MEV, liquidation and market-manipulation attacks)
• Build, maintain, and test hardened core components of the chain (consensus, state management, financial infrastructure), and fix vulnerabilities directly in the codebase
• Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting
• Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness
• Write clear, high-quality security reports, both internal and public, and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure
• Take part in incident response, and drive post-mortems and remediation when issues arise
• Research and track the latest blockchain exploits and security developments, and share learnings with the wider team

Requirements:

• Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security
• 5+ years of experience in software security
• Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to
• Solid understanding and proficiency of Golang and/or Solidity
• Strong knowledge of Go idioms, libraries, and parallel processing, plus the security pitfalls common in Go and Cosmos-SDK chains (non-determinism, panics, unbounded iteration, gas and DoS issues)
• Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm contract platform
• Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos
• Ability to write clear security reports and explain risk to both technical and non-technical team members
• A track record in bug bounties, CTFs, or published audits and CVEs
• Experience with fuzzing and formal verification tools
• Prior experience working in trading or at an exchange
• Knowledge of financial instruments and markets