Senior Security Engineer, Product

USA · RemotecontractRemote

Apply on Employer Site

senior

$180k–$200k

H1B: no

Jito Labs Senior Security Engineer at Jito Labs owns product and protocol security including threat modeling, secure design review, code review, deployment hardening, and onchain monitoring. The role focuses on securing products where code meets real money.

Responsibilities

We've gone from one main product line to four, and the security work on those products has outgrown the one person doing it. This role owns product and protocol security: the surface where our code meets real money.
You'll report to the Head of Security and work alongside an Enterprise Security Engineer who owns internal infrastructure, identity and detection. The split is deliberate. They secure how we work; you secure what we ship.
This is an engineering role. Most of the backlog is code, not policy.
Product and protocol security reviews: threat modeling, secure design review, whitebox code review, and getting in early enough to change designs rather than document them
Deployment hardening across our product lines, including the jito-solana deploy process
Ongoing internal audits of our own products rather than waiting for an external engagement to surface issues
Onchain monitoring: standing up tooling like Hypernative or Blockaid and building the detections that catch probing before an attack is underway
Bug bounty operations as we bring more of the program in-house: triage, severity assessment, remediation tracking, and escalation
Auditor findings driven through to closure: reviewed, prioritized, assigned, tracked
AI-assisted security testing and continuous scanning, plus the security surface that comes with agents and AI tooling operating inside a codebase
High-impact key and asset risks: key hygiene, hot wallet and engineering keys, multisigs, security councils

Qualification

5+ years of professional experienceGenuine interest in AI securityStrong written communicationExperience in web3Experience with multisig schemesExperience with fuzzingWhy This Role Exists

Required

A software engineering background is essential. You've built production systems, and that foundation shapes how you approach security.
You've since moved into product security and are fluent across the lifecycle: threat modeling, secure design review, whitebox code review, and vulnerability testing
5+ years of professional experience, with a meaningful portion in software engineering before moving into security
Proficiency in at least one systems or backend language. Rust preferred; Go, C++, or Python also work. You will read production codebases and build tooling as routine parts of this job.
Demonstrated experience in product or application security, not solely infrastructure or compliance work
A track record of building security tooling or automation from scratch
Experience running or contributing to a bug bounty program, or a clear view of how you'd run one
Genuine interest in AI security, including adversarial testing of agent controls
Strong written communication. Findings nobody can act on are findings that don't get fixed.
Comfortable with high ownership and working autonomously on a small team
Experience in web3, crypto, or DeFi

Preferred

Smart contract or onchain security experience, particularly on Solana or another SVM chain
Experience with onchain monitoring tooling such as Hypernative or Blockaid
Familiarity with validator or consensus infrastructure
Experience with multisig schemes: signing policy design, quorum configuration, or key management in production
Familiarity with hardware security modules: integration, key lifecycle, or operational use
Exposure to trusted execution environments: attestation, confidential compute, or secure enclave design
Experience with fuzzing, formal verification, or property-based testing of financial logic
Why This Role Exists