{"id":698681,"url":"https://alion.io/job/rootstocklabs-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":686417,"name":"RootstockLabs","domain":"rootstocklabs.com","url":"https://alion.io/company/rootstocklabs","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"unspecified","remote_scope_basis":null,"remote_working_hours":{"label":"UTC-3 – UTC+2","utc_offset_min":-3,"utc_offset_max":2},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":211000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bitcoin","optional":false},{"name":"CI/CD","optional":false},{"name":"DeFi","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Smart Contracts","optional":false},{"name":"Solidity","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"C++","optional":true},{"name":"Ethereum","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-09-10T06:53:51Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-28T15:31:51Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"NOTE: As part of our hiring process, we conduct background and reference checks at the to validate relevant experience, qualifications, location and professional history.\nABOUT THE ROLE\nAs an Application Security Engineer at RootstockLabs, you will help secure our Bitcoin-secured DeFi infrastructure by reviewing code, smart contracts, and protocol changes, and by building the security automation that keeps our development lifecycle safe. You will work closely with development teams on threat modeling and architecture reviews, manage our bug bounty program end to end, and coordinate external security audits with third-party auditors. You will also research attack techniques relevant to our ecosystem (EVM, bridges, p2p) and translate them into concrete defenses, and support incident investigations when application-layer issues arise.\nKEY RESPONSIBILITIES\nPerform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects\nParticipate in design and architecture reviews; threat-model new products and features with development teams\nTriage and validate bug bounty reports; assess severity and coordinate remediation with engineering\nCollaborate on external security audits: scope engagements and work with third-party auditors through to the resolution of findings\nBuild and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines\nResearch attack techniques relevant to the ecosystem (EVM, bridges, p2p) and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes\nSupport incident investigations when application-layer issues arise\nWHAT YOU BRING\n3+ years of experience in Application Security or Security Engineering\nSolid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust\nHands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security\nExperience building and operating security automation, AI-assisted workflows (LLM-based triage, code review, or scanning), SAST/DAST, dependency and secret scanning, and CI/CD security gates\nFluent English\nNICE TO HAVE\nExperience in bug bounty triage or vulnerability disclosure programs\nExperience mitigating network-level attacks (p2p, eclipse, DoS) or analyzing consensus-level attack scenarios\nOffensive security background (pentesting, red team, CTFs, exploit development)\nPublic security research: CVEs, bug bounty track record, audit reports, conference talks\nKnowledge of C/C++ (for node/client codebases)\nExperience with fuzzing (smart contracts or native code)\nROOTIES BENEFITS\nAt RootstockLabs, we don’t just offer a job, we offer a community. Here’s what you can expect when you join us:\nCompetitive compensation package and unique benefits designed to support your growth and well-being.\n 100% Remote Work working within a Central European to Argentinian time-zone window (UTC-3 to UTC+2, with about an hour's flexibility either side), and with access to global coworking spaces.\nWork-Life Balance: Paid vacation and sick leave days\nContinuous Learning: Access to training programs, language courses, and learning sponsorship annually.\nUnique Projects: Work with cutting-edge blockchain technology in a global, diverse team. \nABOUT ROOTSTOCKLABS \nRootstockLabs is a key contributor to Rootstock, Bitcoin's Financial Infrastructure for lending, yield, and onchain capital markets. We build and commercialize the institutional infrastructure that turns Bitcoin into productive capital.\nWhat we do: Develop and commercialize Bitcoin-backed lending, tokenized real-world assets, and onchain financial strategies\nWho we work with: Leading custodians, asset managers, and financial institutions\n Why it matters: Rootstock is secured by 80%+ of Bitcoin's hash power and has run with 100% uptime since 2018 (bringing Ethereum-style programmability to the world's hardest money).\n Proof it works: 200+ dApps live on Rootstock, from BTCFi protocols like Sushiswap and Oku to institutional names like Mercado Bitcoin, Animoca Brands, and Paystand","description_format":"text","description_chars":4179,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cryptocurrencies","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2026-09-11T02:27:08Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.588,"p_room":0.45,"age_days":47,"expected_fill_days":29,"reasons":["conf:4","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/rootstocklabs-application-security-engineer","json_url":"https://alion.io/job/rootstocklabs-application-security-engineer.json","meta":{"generated_at":"2026-10-28T17:28:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23809,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686417},"rest":"https://alion.io/mcp/rest/get_company?id=686417"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frootstocklabs-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frootstocklabs-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frootstocklabs-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rootstocklabs-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frootstocklabs-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":698681}},{"tool":"search_jobs","arguments":{"company":"rootstocklabs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":698681},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}