Experience : 2.00 + years

Salary : INR 900000-2000000 / year (based on experience)

Expected Notice Period : 30 Days

Shift : (GMT+05:30) Asia/Kolkata (IST)

Prospect Type : Office ()

Placement Type : Full Time Permanent position(Payroll and Compliance to be managed by: A deep-tech engineering company)

**(*Note: This is a requirement for one of Uplers' client - A deep-tech engineering company)

**What do you need for this opportunity?

Must have skills required: Good at writing technical reports, Information Technology, MITRE ATT&CK;, NIST, Rust A deep-tech engineering company is Looking for:**** Security Engineer

About Us We are a blockchain R&D; studio, driven by our commitment to bridging (pun intended) the divide between foundational blockchains like Bitcoin and the thriving DeFi ecosystem. Our core expertise lies in solving intricate blockchain challenges through rigorous research in the realms of cryptography, game theory, and protocol design.

Our mission is to make web3 simple and hassle-free for everyone. No intimidating complexities, just pure potential. We began our journey in 2022, with a previous experience of building two billion-dollar web3 projects, Ren and Rook under our belt.

Our flagship product is the Catalog Wallet, a unique implementation of a multichain wallet that lets you use native bitcoin directly on any DApp. We also help power web3 projects like Garden to become cross-chain seamlessly.

Role Description We are seeking a Security Engineer I to join our team. The ideal candidate will be responsible for both Web3 and Web2 security paradigms, knowledge of Amazon Web Services (AWS), and proficiency in monitoring and alerting systems. This role involves ensuring the security of our digital assets, infrastructure, and applications.

Responsibilities

- Perform penetration testing of applications/products based on Web, Mobile, Web3 assets like Smart Contract, Bitcoin Script, etc.




- Plan and perform red team exercises in a variety of environments.
- Manage applications/products bug bounty program with validation and response mechanism for vulnerabilities submitted by external researchers.
- Continuous research on new attack vectors/techniques and their mitigations.
- Manage attack surface based on risk assessment for the business.
- Develop scripts, tools and methodologies to enhance security posture of the whole company and its applications/products.
- Manage continuous passive and active monitoring and alert systems such as Prometheus, Grafana, Wazuh, etc.
- Apply knowledge of AWS services to support the maintenance of secure cloud infrastructure.
- Deployment and management of security tools (open source and commercial).
- Clear communication for vulnerability reports and their remediation required.
- Work with cross-functional teams to align and prioritize remediation efforts.
- Work collaboratively/independently on unique or special assignments which may require specialized knowledge and/or experience.
- Comply with company, division and professional ethical standards.

Essential Qualifications

- Bachelor''''''''s degree in Computer Science, Information Technology, or a related field.
- Foundational understanding of blockchain technologies and associated security considerations.
- At least 1 year of experience in a security engineering role or a related position.
- Proficiency in using monitoring and alerting tools.
- Uncompromising personal and professional integrity and ethics.
- Solid understanding of application, infrastructure and networking architecture.




- Strong exposure to popular application security standards including OWASP Top 10, SANS Top 25, NIST, MITRE ATT&CK;, etc. and shift left security methodologies.
- Any one of these certifications (Good to have): C-PENT, eJPT, PWPP, GPEN.
- Ability to think critically and identify areas of technical and non-technical risk.
- Good at writing technical reports and executive summaries to communicate risk to required stakeholders.
- Familiarity with AWS services and basic cloud security concepts.
- Understanding of languages like Go, Rust, TypeScript, and Python.

Preferred Qualifications

- More than 2 years of experience in a security engineering role or a related position.
- Experience triaging public bug bounties.
- Published regular security-related blogs, videos, or other resources for community growth.
- Worked with distributed systems in real-world scenarios or built POCs of Raft-like protocols.
- Exceptional CTF recognition in competitions or on platforms like TryHackMe, Hack The Box, etc.

How to apply for this prospect?

- Step 1: Click On Apply! And Register or Login on our portal.
- Step 2: Complete the Screening Form & Upload updated Resume
- Step 3: Increase your chances to get shortlisted & meet the client for the Interview!

About Uplers: Our goal is to make hiring reliable, simple, and fast. Our role will be to help all our talents find and apply for relevant contractual onsite opportunities and progress in their career. We will support any grievances or challenges you may face during the engagement. (Note: There are many more opportunities apart from this on the portal. Depending on the assessments you clear, you can apply for them as well).

So, if you are ready for a new challenge, a great work workplace, and an opportunity to take your career to the next level, don't hesitate to apply today. We are waiting for you!

📌 Security Engineer (Onsite - Hyderabad)
🏢 Uplers
📍 Hyderabad