Phantom is hiring a Remote Senior Application Security Engineer
\nPhantom is revolutionizing the way millions of people interact with the crypto ecosystem. Our self-custodial wallet offers a seamless, unified experience for managing accounts and tokens across Solana, Bitcoin, Ethereum, and Polygon, empowering users with a single, convenient solution. By integrating cutting-edge security features and launching innovative tools for an enhanced personalized user experience, Phantom is able to provide a next-generation, safe and easy to use self-custodial wallet for everyone. This strategy has allowed Phantom to achieve significant milestones including surpassing 7 million MAUโs, reaching #1 in the Google play store finance category, and consistently trending as a Top 50 app across all categories, right next to X, PayPal, Coinbase, and ChatGPT.\nResponsibilities\n\nSecurity is core to the product and the reason why millions of people trust Phantom to securely store their crypto assets. As a Security Engineer, you will be responsible for identifying, exploiting and mitigating security vulnerability risks in our software applications, as well as conducting security assessments and investigations. You will work closely with development teams to ensure that security is integrated throughout the software development lifecycle. Join us on our mission to make the digital economy safe and easy to use for everyone.\n\n\n* Identify and mitigate security vulnerabilities in code, systems and networks through manual review, automated tools and threat modeling.\n\n* Responsible for the configuration and tuning of application security tooling, process and alerting.\n\n* Responding to and validating Bug Bounty submissions.\n\n* Keep up to date with the latest offensive security techniques, application security threats, and best practices, including recommending improvements to security posture\n\n* Write detailed reports of your findings and present them to management and technical teams, and help to prevent real-world attacks.\n\n* Work with development teams to implement secure coding practices.\n\n* Collaborate with other teams such as development, operations, and compliance to ensure that security is integrated throughout the organization.\n\n* Participate in incident response and incident management activities.\n\n\n\nQualifications\n\n\n* 3+ years of experience in offensive security techniques, with a focus on blockchain technology.\n\n* Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications.\n\n* Proficient in code review for Typescript and JavaScript with a strong understanding of application security threats.\n\n* Write PoCโs to prove vulnerabilities, review and ensure that patch code meets the standards set by the repository owners and maintainers.\n\n* Strong analytical and problem-solving skills.\n\n* Good verbal and written communication skills.\n\n\n\nWhy Work with Us\n\nWe are a team of experienced builders in the blockchain and crypto industry. Our journey began from users seeking an easy, seamless path to accessing the crypto ecosystem. This passion fueled our exponential growth, allowing us to onboard over 7M+ active users in just over three years; with our user base growing weekly. Our dedication to a secure and seamless user experience has made us the leading wallet on Solana as well as our multi-chain approach enhances our platform's versatility, meeting the needs of a diverse and growing user base. By staying at the forefront of technology and user expectations, we continue to innovate and set industry standards on self-custodial crypto wallets.\n\nThere has never been a better time to work in crypto to help shape the future of innovation with a focus around the wallet experience!\n\n\n* \nFirst impressions matter: Wallets are responsible for a users first impression with crypto and onboarding new users into crypto. By ensuring that a user has a great first-time experience with crypto, we can help supercharge the growth of the entire ecosystem.\n\n* \nMake crypto easier to navigate: There is no easy way for a user to discover and navigate all that crypto has to offer. Wallets have a unique opportunity to help users not only onboard to crypto but also stay retained by exploring new things to do.\n\n* \nWe live in a multi-chain world: We currently support Solana, Ethereum, Polygon and Bitcoin with more networks to come in the new future. We are focused on creating a unified, multi-chain crypto experience for users.\n\n\n\nBenefits\n\n\n* Competitive salary and equity\n\n* Comprehensive insurance (medical/dental/vision) โ 100% covered\n\n* Stipend for your ideal remote set-up\n\n* Flexible hours and a supportive remote environment\n\n* Unlimited vacation: Take time when you need it (and we really mean it!)\n\n* 401(k) retirement plan\n\n* Monthly wellness benefit\n\n* Weekly meal benefit\n\n* Global off-sites\n\n\n\n\nWe strongly encourage candidates of all different backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and weโre eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. Weโre committed to building an inclusive, supportive place for you to do the best work of your career.\n\nThe target base salary for this role will range between $160,000 to $210,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer.\n\n#Li-DNP \n\n#Salary and compensation\n
No salary data published by company so we estimated salary based on similar jobs related to Crypto, Bitcoin, JavaScript, Finance, Typescript, Mobile, Senior and Engineer jobs that are similar:\n\n
$60,000 — $100,000/year\n
\n\n#Benefits\n
๐ฐ 401(k)\n\n๐ Distributed team\n\nโฐ Async\n\n๐ค Vision insurance\n\n๐ฆท Dental insurance\n\n๐ Medical insurance\n\n๐ Unlimited vacation\n\n๐ Paid time off\n\n๐ 4 day workweek\n\n๐ฐ 401k matching\n\n๐ Company retreats\n\n๐ฌ Coworking budget\n\n๐ Learning budget\n\n๐ช Free gym membership\n\n๐ง Mental wellness budget\n\n๐ฅ Home office budget\n\n๐ฅง Pay in crypto\n\n๐ฅธ Pseudonymous\n\n๐ฐ Profit sharing\n\n๐ฐ Equity compensation\n\nโฌ๏ธ No whiteboard interview\n\n๐ No monitoring system\n\n๐ซ No politics at work\n\n๐ We hire old (and young)\n\n
\n\n#Location\nWorldwide
๐ Please reference you found the job on Remote OK, this helps us get more companies to post here, thanks!
When applying for jobs, you should NEVER have to pay to apply. You should also NEVER have to pay to buy equipment which they then pay you back for later. Also never pay for trainings you have to do. Those are scams! NEVER PAY FOR ANYTHING! Posts that link to pages with "how to work online" are also scams. Don't use them or pay for them. Also always verify you're actually talking to the company in the job post and not an imposter. A good idea is to check the domain name for the site/email and see if it's the actual company's main domain name. Scams in remote work are rampant, be careful! Read more to avoid scams. When clicking on the button to apply above, you will leave Remote OK and go to the job application page for that company outside this site. Remote OK accepts no liability or responsibility as a consequence of any reliance upon information on there (external sites) or here.