Conduct code audits and penetration tests across AWS cloud environments, infrastructure, backend applications, and blockchain ecosystem tools. Lead red-team exercises, collaborate with detection engineering and incident response teams, develop offensive security automation, support investigations, research emerging threats, and mentor junior staff. The role requires expertise in AWS attack techniques, binary exploitation, web application security, adversary frameworks, and offensive tooling, with Web3 and blockchain security experience preferred.
At Offchain, we aren’t just building products: we’re leading a movement.
As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.
At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.
Why Offchain?
Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.
Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.
Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.
To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
The Role
- As a Senior Security Engineer at Offchain, you will emulate the real-world tactics, techniques, and procedures of sophisticated adversaries to surface vulnerabilities across our infrastructure and ecosystem tools.
- You’ll run hands-on penetration tests, lead red team exercises, and work side-by-side with blue team partners to test, refine, and strengthen detection and response capabilities.
- Your efforts will directly shape how Offchain designs, launches, protects, and achieves compliance for the infrastructure that powers millions of users and applications - including key standards such as SOC 2.
What you'll do:
- Conduct comprehensive code audits across a variety of internal applications and infrastructure.
- Conduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications.
- Collaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality.
- Build, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed.
- Offer offensive security expertise during incident investigations, including log analysis and root cause reviews.
- Keep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community.
- Own offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange.
What you'll need:
- 5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field.
- Extensive experience with conducting code audits to identify and remediate security issues.
- Experience with binary exploitation.
- Mastery of AWS & specific attack techniques and configuration weaknesses.
- Strong understanding of adversary tactics and frameworks like MITRE ATT&CK.
- In-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories.
- Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.
- Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation.
- Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.
- A natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems.
Nice-to-haves
- Web3 / blockchain security exposure: smart contract auditing, bug bounty hunting (e.g., Immunefi, Code4rena), or DeFi protocol review.
- Familiarity with Ethereum L1 / L2 node architecture and security risks.
- Experience in blockchain infrastructure penetration testing.
Perks:
- Remote-first global workforce + NY office
- Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
- Medical, dental & vision coverage (US + some other countries)
- 401k retirement plan + company match (US only)
- Wellness stipend
- Home office set up / ergonomic equipment program
Offchain Labs Princeton, New Jersey, USA Office
Princeton, NJ, United States
Similar Jobs
Machine Learning • Payments • Security • Software • Financial Services
Manages the lifecycle of less complex merchant services products and initiatives, including product selection, design, development, pricing, promotion, rollout, and performance analysis. Builds business cases, evaluates market and technology trends, collaborates with sales, marketing, digital, and external partners, and supports risk, compliance, and audit activities. Uses customer insights and business results to recommend product improvements.
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Design, develop, and operate scalable VoIP infrastructure supporting AI-driven voice workloads. Integrate telephony systems, LLM applications, and real-time communication platforms while improving observability, reliability, deployment, and SRE practices. Build tested, maintainable software across telephony and AI layers, support production environments, collaborate with engineering and product teams, and mentor colleagues.
Top Skills:
AnsibleFreeswitchGitlab CiGoHelmInfrastructure As CodeJavaKamailioKubernetesLlmsPrometheusPstnPythonRtpengineSbcsSip/RtpSoftware-Defined NetworkingSplunk
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handles inbound calls and warm leads, consults customers on insurance needs, recommends appropriate coverages, and converts prospects into policyholders. The role includes paid training and Property & Casualty licensing support, customer communication, sales closing, and remote work using company-provided equipment. Employees must work four weekdays and one weekend day while meeting home-office and high-speed internet requirements.
Top Skills:
PcWired High-Speed Internet
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
