{"id":69048,"url":"https://alion.io/job/movement-security-engineer","title":"Security Engineer","company":{"id":28374,"name":"Movement AI","domain":"movement.ai","url":"https://alion.io/company/movement","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":109000,"max_usd":249000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cosmos","optional":false},{"name":"Ethereum","optional":false},{"name":"MEV","optional":false},{"name":"Move","optional":false},{"name":"Move Prover","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Smart Contracts","optional":false},{"name":"Solidity","optional":false},{"name":"Staking","optional":false},{"name":"Aptos","optional":true},{"name":"Certora","optional":true},{"name":"CosmWasm","optional":true},{"name":"Echidna","optional":true},{"name":"Foundry","optional":true},{"name":"OpenZeppelin","optional":true},{"name":"Solana","optional":true},{"name":"Sui","optional":true}],"status":"live","first_seen_at":"2026-05-04T01:35:32Z","employer_posted_date":"2026-05-04","last_verified_at":"2026-10-16T06:54:15Z","board_verified":true,"closed_at":null,"days_open":165,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":165},"description":"About Move Industries\nMove Industries is building the People’s Chain, a Move-based Layer 1 blockchain, and a diverse ecosystem that empowers talented builders to create the future of finance, infrastructure, and real-world value on chain. As a core contributor to the Movement Network, we combine deep protocol engineering with open community governance, returning blockchain to its roots by giving financial power, access and opportunity back to the people.\nOur Mission\nOur mission is to fuel the next generation of secure, expressive, and high-performance blockchain applications through the Move programming language and scalable distributed systems. You will help unlock massive throughput, low latency, and resilience across consensus, data availability, and privacy - the invisible rails that make an open and decentralized future possible.\nThe Role\nWe are seeking a Security Engineer to join our core engineering team.\nThis is a hands-on offensive and defensive role. You will audit Move modules and protocol code, build tooling that finds bugs before attackers do, and own the security posture of a production Layer 1. You will work directly with protocol, runtime, and consensus engineers - and with external auditors and the broader Move security community - to make the People’s Chain one of the hardest targets in crypto.\nThis is not a checklist-driven compliance role. This is an adversarial systems engineering role with end-to-end ownership of how the network survives contact with sophisticated, well-funded attackers.\nWhat You’ll Do\nAudit Move modules, protocol code (Solidity, Rust), and consensus/networking layers for vulnerabilities before they ship\n\nDesign and build security tooling: fuzzers, invariant tests, static analyzers, formal specifications, and runtime monitoring\n\nDrive formal verification efforts using the Move Prover; write specifications for critical modules (token, staking, governance, bridge)\n\nThreat-model the protocol end-to-end - consensus, execution, data availability, bridges, RPC, validator infrastructure\n\nUse AI adequately to scale code review, vulnerability triage, and exploit-pattern detection across the codebase\n\nOwn the bug bounty program and triage external reports; turn findings into engineering fixes and regression tests\n\nLead security incident response, root cause analysis, post-mortems, and disclosure coordination\n\nPartner with engineering teams to shift security left: secure-by-default APIs, code review standards, threat models attached to every design doc\n\nEngage with the external security community - auditors, researchers, white-hats - and contribute back to the Move ecosystem\n\nStay ahead of the threat landscape: bridge exploits, MEV, signature malleability, oracle manipulation, governance attacks, validator collusion\n\nWhat We’re Looking For\nTrack record of finding real vulnerabilities - public audit reports, CVEs, bug bounty wins, original security research, or notable CTF results\n\nStrong code-level security skills: you can read a Move module or a Solidity codebase and instinctively spot the dangerous path\n\nDeep understanding of at least one smart contract VM (Move, EVM, SVM) and the classes of bugs each enables\n\nComfort writing real code (Move, Solidity, Rust, Python) to build security tooling - not just consume it\n\nStrong understanding of:\nSmart contract vulnerability classes: access control, reentrancy and Move-equivalents, oracle manipulation, MEV, signature replay, arithmetic edge cases, upgrade hazards\n\nConsensus security and BFT failure modes\n\nCryptographic primitives (signatures, hashes, ZK basics) and where they go wrong in practice\n\nBridge and cross-chain security\n\nAdversarial mindset: you assume the protocol will be attacked by sophisticated, well-funded adversaries on day one\n\nBias toward tooling and automation: find one bug manually, then write the tool that finds the next ten\n\nPreferred Qualifications\nExperience auditing or building Move smart contracts (Aptos, Sui, or similar)\n\nExperience with formal verification - Move Prover, Certora, K Framework, Coq, Lean, or similar\n\nExperience with fuzzing and invariant testing frameworks (Echidna, Foundry, Medusa, libFuzzer, AFL)\n\nPrior experience at a top audit firm (Trail of Bits, OpenZeppelin, ChainSecurity, Spearbit, Cantina, Zellic, Sigma Prime) or in-house security at a major L1/L2\n\nFamiliarity with EVM internals, Solidity, or Rust-based VMs (CosmWasm, Solana programs)\n\nPublished security research, conference talks, or significant open-source security tooling\n\nExperience running or contributing to bug bounty programs at scale (Immunefi, HackerOne, Cantina)\n\nExperience with incident response, on-call rotations, and disclosure coordination under pressure\n\nWhy Join Us\nTrue ownership of security across a production L1 - protocol, runtime, infrastructure, and ecosystem\n\nWork directly with protocol and runtime engineers - not as a gate, but as a partner\n\nSolve hard problems at the intersection of language design, distributed systems, cryptography, and adversarial engineering\n\nCompetitive compensation with meaningful upside\n\nDefend infrastructure that real applications, real users, and real money depend on\n\nOur Engineering & Ownership Culture\nMake it live. Then make it better.\n\nKeep It Simple Stupid (KISS)\n\nExtreme ownership\n\nNo silos between “dev” and “security”","description_format":"text","description_chars":5343,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security"],"lifecycle":[{"event":"open","at":"2026-05-04T01:35:32Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.172,"p_room":0.28,"age_days":165,"expected_fill_days":21,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/movement-security-engineer","json_url":"https://alion.io/job/movement-security-engineer.json","meta":{"generated_at":"2026-10-16T09:38:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7825,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":28374},"rest":"https://alion.io/mcp/rest/get_company?id=28374"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmovement-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmovement-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmovement-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/movement-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmovement-security-engineer"}]}