Product Security Engineer

nnAbout Hashgraph:nnHashgraph is a fast-growing software company committed to supporting, developing and servicing Hedera, an open source, proof-of-stake platform. Hedera is EVM-compatible and has been specifically built to meet the needs of enterprise and Web3 applications, which require speed, security, stability and sustainability. Hederas public network is governed by industry-leading organizations, spanning 11 sectors and 14 regions who oversee the development and direction of the decentralized platform.nnYou may find yourself doing all of the following:nnn* Conducting thorough security reviews of the company’s products throughout the development lifecycle, including the design, implementation, and release phasesnn* Collaborating with cross-functional teams to identify security vulnerabilities and recommend mitigation strategiesnn* Developing and maintaining security testing methodologies and proceduresnn* Implementing and managing automated security testing tools and processesnn* Providing guidance and support to development teams on secure coding practices and security best practicesnn* Staying current with industry trends and emerging threats to inform and enhance product security measuresnn* Assisting in incident response activities related to product security incidentsnn* Participating in security awareness training programs for internal stakeholdersnnnnnQualification Requirements:nnn* Minimum 6 years of experience in application or product security, including 2-3 years of experience in software development or related fieldnn* Familiarity with common security vulnerabilities and attack vectorsnn* Hands-on experience with security testing tools such as static analysis, dynamic analysis, and fuzzing toolsnn* Strong understanding of secure coding practices and principles (mainly Java and Solidity)nn* nOSWA and/or CISSP certifications are mandatory – web3 experience can be considered as an alternative if these certifications haven’t been obtainednnnnnOther skills that are great to bring with you but that we can help you develop:nnn* Relevant certifications (e.g., OSCP, OSEP, OSWE)nn* Experience in Bug bounty, Security Research, CVE publications, Red teaming, and attack surface managementnn* Experience with cloud environments (e.g., GCP, AWS)nn* Understanding of common programming languages and scripting languages, such as Python, PowerShell, or Bashnn* Experience with containerization and orchestration technologies, such as Docker and Kubernetes, and their associated security best practicesnn* Knowledge about web3 / Blockchain / Cryptonnn nn#Salary and compensationn No salary data published by company so we estimated salary based on similar jobs related to Web3, Docker, Testing, Java, Cloud and Engineer jobs that are similar:nn $52,500 $80,000/yearn nn#Benefitsn 401(k)nn Distributed teamnn Asyncnn Vision insurancenn Dental insurancenn Medical insurancenn Unlimited vacationnn Paid time offnn 4 day workweeknn 401k matchingnn Company retreatsnn Coworking budgetnn Learning budgetnn Free gym membershipnn Mental wellness budgetnn Home office budgetnn Pay in cryptonn Pseudonymousnn Profit sharingnn Equity compensationnn No whiteboard interviewnn No monitoring systemnn No politics at worknn We hire old (and young)nn nn#LocationnRemote within EU or APAC

Tagged as: Java, learning, Python, Security Engineer