security

Parity Technologies

<div><h2>About the position (or What you will do)</h2>
Parity has a lot of products: blockchain clients written in Rust, mobile apps written in platform-native languages, browser-based tools and extensions written in JavaScript. We also maintain some crypto and networking libraries (mostly in Rust) and a blockchain framework used by several hundreds of third-party teams. All of this code needs to be consistently secured — and as a head of AppSec, it would be your job.
<h3>You would need to:</h3>
<ul>
<li>be that important link helping security researchers (be that independent auditors, bug bounty hunters or even yourself) and engineers in charge of the code understand each other; </li>
<li>help teams learn state of the art security practices and embed them into day-to-day work;</li>
<li>perform a lot of threat modelling and other pre-audit documentation work to help us get most kick for the (quite significant) buck we spend on those audits;</li>
<li>hone and improve our security-related processes like bug bounty and internal vulnerability response;</li>
<li>and of course this is not a single-man job, so you’d be building and growing a team to help you with those challenges.</li>
</ul>
<h3>We expect you to:</h3>
<ul>
<li>know your security tools and approaches: you should be leading our way when setting up SAST, DAST, fuzzing, property-based testing, symbolic execution, network simulation tools and such;</li>
<li>have exposure to cryptography, decentralized networking, hardware key management solutions;</li>
<li>have understanding of modern blockchain tech landscape and the new classes of threats it experiences;</li>
<li>have experience in threat modelling, red/blue teaming, working with best in class independent security teams and turning their findings into actual deployed fixes in our codebase;</li>
<li>be able to help with hiring, lead the resulting team and set up security practices all around the company;</li>
<li>be a self-starter: most of the time there would be little guidance on which areas to work on first and what to improve there. You’re expected to determine that yourself, keeping company-wide goals in mind, and drive those initiatives to completion.</li>
</ul>
<h3>And ideally also:</h3>
<ul>
<li>Rust knowledge;</li>
<li>Prior work experience in blockchain/cryptocurrency fields;</li>
<li>located in or willing to relocate to Berlin, Germany;</li>
<li>A background in open source software development;</li>
<li>Passionate about Web 3.0 and what it represents for the future;</li>
<li>Have an interest in Parity and accompanying technologies such as Substrate.</li>
</ul>
<h2>About Parity</h2>
The team at Parity builds core infrastructure to power a better internet. We do this by innovating in and fostering the open source ecosystem surrounding blockchain development, also known as <a href="https://www.forbes.com/sites/juttasteiner/2018/10/26/what-the-heck-is-web-3-0-anyway/">Web 3.0</a>.
Every day we interact with technologies controlled by a handful of large companies whose interests often conflict with our own. Despite that conflict, we still use their software either because many of the benefits seem to outweigh any perceived risk, we feel there is no choice, or there is no better alternative. As a result, we end up granting such companies access to our personal data which, in turn, gives them far-reaching control over our digital lives and in that, unprecedented influence over a multitude of globally impactful initiatives and innovations.
<a href="https://www.parity.io/">Parity Technologies</a> is a team of the world’s premiere blockchain developers building industry-leading technologies that enable developers to create the next wave of better products and services that respect the freedom and data of individuals. You’ll join at a critical moment when the future of the decentralized web is being shaped, and perform an influential role in making a more equitable society for our future. 
We primarily steward the <a href="https://www.parity.io/technologies/substrate/">Substrate</a> ecosystem which includes <a href="https://polkadot.network/">Polkadot</a> and <a href="https://kusama.network/">Kusama</a>, both of which are next-generation, sharded, multichain networks. Our flagship product, <a href="https://www.parity.io/technologies/substrate/">Substrate</a>, is an open-source modular and extensible blockchain-building framework that allows rapid innovation and fast deployment of custom built blockchains. <a href="https://www.parity.io/technologies/substrate/">Substrate</a> provides the core building blocks of blockchains built for deployment to <a href="https://polkadot.network/">Polkadot</a> and <a href="https://kusama.network/">Kusama</a>. Our key programming language is Rust, and all of our work is open source.
Not a perfect match to our requirements? We're happy to receive your application anyways and hear how you think you can help us achieve our mission.</div>

Head of Application Security (AppSec) (m/f/d)

Parity Technologies · Berlin · full-time

Wen wir suchen

Wer wir sind

Parity Technologies

Email: info@parity.io

Kein Job für Dich dabei?

Guides

Talents

Unternehmen

Who Moves