Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇬🇮 Gibraltar – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RootstockLabs

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📣 Marketing

₿ Crypto

Consulting • Marketing • Crypto

RootstockLabs is a pioneering company focused on building and expanding the capabilities of Bitcoin since 2017. The firm aims to provide developers with the necessary tools to innovate on Bitcoin's decentralized financial layer, Rootstock, which allows the creation of decentralized applications and services. With a commitment to making Bitcoin accessible for all, RootstockLabs enhances economic participation through technologies aimed at scaling Bitcoin, promoting secure and seamless financial transactions globally.

📋 Description

• Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects • Participate in design and architecture reviews and threat-model new products and features with development teams • Triage and validate bug bounty reports, assess severity, and coordinate remediation with engineering • Collaborate on external security audits, scope engagements, and work with third-party auditors through resolution of findings • Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines • Research attack techniques relevant to EVM, bridges, and p2p systems and turn findings into monitoring alerts, CI security checks, and hardening changes • Support incident investigations involving application-layer issues

🎯 Requirements

• 3+ years of experience in Application Security or Security Engineering • Solid grasp of common vulnerability classes (OWASP Top 10) • Secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust • Hands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security • Experience building and operating security automation • Experience with AI-assisted workflows, including LLM-based triage, code review, or scanning • Experience with SAST/DAST, dependency and secret scanning, and CI/CD security gates • Fluent English • Background and reference checks as part of the hiring process

🏖️ Benefits

• Competitive compensation package and unique benefits designed to support your growth and well-being • 100% remote work within a Central European to Argentinian time-zone window (UTC-3 to UTC+2, with about an hour's flexibility either side) • Access to global coworking spaces • Paid vacation and sick leave days • Access to training programs, language courses, and annual learning sponsorship • Work with cutting-edge blockchain technology in a global, diverse team