\n\nAbout Hashgraph:\n\nHashgraph is a fast-growing software company committed to supporting, developing and servicing Hedera, an open source, proof-of-stake platform. Hedera is EVM-compatible and has been specifically built to meet the needs of enterprise and Web3 applications, which require speed, security, stability and sustainability. Hedera’s public network is governed by industry-leading organizations, spanning 11 sectors and 14 regions who oversee the development and direction of the decentralized platform.\n\nYou may find yourself doing all of the following:\n\n\n* Conducting thorough security reviews of the company's products throughout the development lifecycle, including the design, implementation, and release phases\n\n* Collaborating with cross-functional teams to identify security vulnerabilities and recommend mitigation strategies\n\n* Developing and maintaining security testing methodologies and procedures\n\n* Implementing and managing automated security testing tools and processes\n\n* Providing guidance and support to development teams on secure coding practices and security best practices\n\n* Staying current with industry trends and emerging threats to inform and enhance product security measures\n\n* Assisting in incident response activities related to product security incidents\n\n* Participating in security awareness training programs for internal stakeholders\n\n\n\n\nQualification Requirements:\n\n\n* Minimum 6 years of experience in application or product security, including 2-3 years of experience in software development or related field\n\n* Familiarity with common security vulnerabilities and attack vectors\n\n* Hands-on experience with security testing tools such as static analysis, dynamic analysis, and fuzzing tools\n\n* Strong understanding of secure coding practices and principles (mainly Java and Solidity)\n\n\n\n\nOther skills that are great to bring with you but that we can help you develop:\n\n\n* Relevant certifications (e.g., OSCP, OSEP, OSWA, OSWE)\n\n* Experience in Bug bounty, Security Research, CVE publications, Red teaming, and attack surface management\n\n* Experience with cloud environments (e.g., GCP, AWS)\n\n* Understanding of common programming languages and scripting languages, such as Python, PowerShell, or Bash\n\n* Experience with containerization and orchestration technologies, such as Docker and Kubernetes, and their associated security best practices\n\n* Knowledge about web3 / Blockchain / Crypto\n\n\n \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Web3, Docker, Java, Cloud and Engineer jobs that are similar:\n\n $60,000 — $100,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nRemote within EU or APAC