资深产品安全工程师
Staff Product Security Engineer
Phantom 的使命是将世界与开放市场的自由连接起来。数以百万计的人在全球使用 Phantom 来访问永不关闭的全球市场，包括永续合约、预测市场、代币化资产、稳定币和网络迷因。Phantom 用户能够发现重要的市场和塑造它们的文化时刻，通过实时数据和顶级交易者的验证表现建立信心。以自我托管和对开放网络的访问为核心，Phantom 让他们在一个应用中掌控自己的财务决策，该应用用于安全地存储或花费全球货币。
Phantom 在 Google Play 的金融类别中排名第一，并且在所有类别中始终位列前 50 名应用。Phantom 与 Hyperliquid、Stripe、Kalshi 和 Visa 等金融领域最值得信赖和有影响力的名字合作，使最受欢迎和创新的金融产品对每个人都可以使用。
我们大约有 180 人，全部远程办公，由 a16z、Sequoia Capital 和 Paradigm 提供的 1.5 亿美元 C 轮融资支持。
## **职责**
安全是产品核心，也是数百万人信任 Phantom 安全存储他们的加密资产的原因。作为安全工程师，您将负责识别、利用和缓解软件应用程序中的安全漏洞风险，以及进行安全评估和调查。您将与开发团队紧密合作，确保安全贯穿整个软件开发生命周期。加入我们，共同实现让数字经济对每个人来说都安全且易于使用的使命。
- 对新项目、基础设施和代码进行定期安全评估。
- 通过手动测试、自动化工具、威胁建模和威胁情报，在代码、系统和网络中识别并缓解安全漏洞。
- 跟踪最新的进攻性安全技术、应用安全威胁以及区块链领域的最佳实践，并建议改进安全态势。
- 编写详细的发现报告，并向管理层和技术团队汇报，帮助防止现实世界的攻击。
- 与开发团队合作，实施安全编码实践，并确保加密功能的完整性。
- 与其他团队（如开发和平台团队）协作，确保安全贯穿整个组织。
查看英文原文
[Phantom](https://phantom.com) is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide.
Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Phantom partners with many of the most trusted and influential names in finance like Hyperliquid, Stripe, Kalshi and Visa, to make the most popular and innovative financial products accessible to everyone.
We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm.
## **Responsibilities**
Security is core to the product and the reason why millions of people trust Phantom to securely store their crypto assets. As a Security Engineer, you will be responsible for identifying, exploiting and mitigating security vulnerability risks in our software applications, as well as conducting security assessments and investigations. You will work closely with development teams to ensure that security is integrated throughout the software development lifecycle. Join us on our mission to make the digital economy safe and easy to use for everyone.
- Perform regular security assessments on new projects, infrastructure and code.
- Identify and mitigate security vulnerabilities in code, systems and networks through manual testing, automated tools, threat modeling and threat intelligence.
- Keep up to date with the latest offensive security techniques, application security threats, and best practices in the blockchain space, and recommend improvements to security posture
- Write detailed reports of your findings and present them to management and technical teams, and help to prevent real-world attacks.
- Work with development teams to implement secure coding practices and to ensure the integrity of cryptographic functions.
- Collaborate with other teams such as development and platform to ensure that security is integrated throughout the organization.
- Participate in incident response and incident management activities.
- Leading large cross-team projects.
## **Qualifications**
- 7+ years of experience in offensive security techniques, with a focus on blockchain technology and cryptography.
- Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications.
- Proficient in code review for JavaScript & Typescript with a strong understanding of application security threats and offensive security techniques.
- Write PoC’s to prove vulnerabilities, review and ensure that patch code meets the standards set by the repository owners and maintainers.
- Strong analytical and problem-solving skills.
- Good verbal and written communication skills.
## **Why Work with Us**
We are a team of experienced builders in the blockchain and crypto industry. Our journey began from users seeking an easy, seamless path to accessing the crypto ecosystem. This passion fueled our exponential growth, allowing us to onboard over 7M+ active users in just over three years; with our user base growing weekly. Our dedication to a secure and seamless user experience has made us the leading wallet on Solana as well as our multi-chain approach enhances our platform's versatility, meeting the needs of a diverse and growing user base. By staying at the forefront of technology and user expectations, we continue to innovate and set industry standards on self-custodial crypto wallets.
There has never been a better time to work in crypto to help shape the future of innovation with a focus around the wallet experience!
- **First impressions matter:** Wallets are responsible for a users first impression with crypto and onboarding new users into crypto. By ensuring that a user has a great first-time experience with crypto, we can help supercharge the growth of the entire ecosystem.
- **Make crypto easier to navigate:** There is no easy way for a user to discover and navigate all that crypto has to offer. Wallets have a unique opportunity to help users not only onboard to crypto but also stay retained by exploring new things to do.
- **We live in a multi-chain world:** We currently support Solana, Ethereum, Polygon and Bitcoin with more networks to come in the new future. We are focused on creating a unified, multi-chain crypto experience for users.
## Benefits
- Competitive salary and equity
- Comprehensive insurance (medical/dental/vision) — 100% covered
- Stipend for your ideal remote set-up
- Flexible hours and a supportive remote environment
- Unlimited vacation: Take time when you need it (and we really mean it!)
- 401(k) retirement plan
- Monthly wellness benefit
- Weekly meal benefit
- Global off-sites
**We strongly encourage candidates of all different backgrounds to apply.** We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career.
The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer.
**We strongly encourage candidates of all backgrounds to apply.** We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career.
_By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws._