Senior Application Security Researcher

Exodus is looking for a security-focused engineer who is passionate about identifying and fixing security vulnerabilities in the crypto ecosystem. Your role will be to ensure the security footprint of the third-party dependencies we bring into our wallet for millions of users to safely secure and exchange crypto assets. We are specifically looking for a security-focused JavaScript and C++ engineer to make improvements to tooling around our security audit process and work with the team to audit in-house and third-party crypto libraries.

What You Will Do

• Improve wallet security by ensuring all of the code we ship is trustworthy.
• Increase the security audit capability of our team, boosting overall development velocity.
• Raise the overall maturity level in the Secure Software Development Lifecycle.
• Audit third-party libraries, focusing on JavaScript and C++ packages for vulnerabilities and malicious code.
• Improve tooling around our security audit process.
• Collaborate with the security team to enhance security posture throughout the product.

Who You Are

• 4+ years of JavaScript security experience.
• Proven ability to understand C++ and identify code vulnerabilities.
• Background in cryptography. 
• Strong written and verbal communication skills.
• Excellent security skills, with a focus on collaborating with the security team on audits.
• Driven, organized, and able to self-prioritize tasks based on team and leadership goals.
• Ability to work independently in an asynchronous work environment.

Nice to Haves

• Experience with the security intricacies of React + React Native and Electron.JS and the NodeJS ecosystem.
• Experience with automated code security analysis tools (CodeQL, Semgrep, SonarQube, Snyk, etc).

About Exodus

Exodus is a multi-asset cryptocurrency wallet with a built-in exchange feature. We started our movement in 2015, and have been a distributed team since then. Our mission is to help half of the world exit the traditional financial system and move into the crypto financial system by the year 2030. 

What We Offer

• Freedom to work wherever you want, whenever you want.
• Building the future. Cryptocurrencies lay the foundation to the internet of value, the next major wave in application technology and personal finance.
• Collaborative and feedback-driven culture.
• Opportunity to grow. 
• Fair pay, no matter where you live, along with a competitive benefits package.
• 100% pay in Bitcoin with a buffer to account for price changes and exchange fees. 
• All the tools you need to do the job. 

Benefits

Health: Most of our health insurance plans are covered 100% for you and covered 50% for your dependents. We’ll also cover dental insurance. If you are outside of the United States, we will reimburse you up to $500 per month for any medical and dental insurance for you and your dependents.

PTO: 30 days of paid time off per year on top of a flexible schedule where you can work wherever and whenever. If you’re part-time with us, you’ll still receive 15 days of paid time off.

Unlimited Bereavement: We will pay you your full salary for the first two weeks for the loss of any immediate family members, but we allow you to take all the time you need to grieve outside of that.

Parental Leave: 13 weeks of fully paid leave with and a month of flexible work for the primary caregiver. 4 weeks of paid leave if you are the child's secondary caregiver.

Tax Help: Getting paid in Bitcoin new to you? Don’t worry! We will reimburse you for speaking with a professional tax specialist in your state/country to make sure everything is taken care of.

Perks: Exodus offers a variety of seasonal perks, such as coverage for gym memberships and therapy. We also offer quarterly Wellness Days! We want to make sure all of our employees know they are our priority and give back for their hard work often.

Our Hiring Process

To apply, we'd love to learn more about you. Please answer our application questions! Submitting a resume is optional.

Our hiring process consists of several different stages. 

Recruiter Interview: If we like your initial application, expect to schedule an interview with a member of our recruitment team. This interview will focus on getting to know you a bit more and will focus on explaining the culture of the company. We want to know more about why you want to join our team, how you feel about our mission and cryptocurrency now, and how it fits into your overall career plan to make sure this is the right place for you.

Interview with your future manager: This is to make sure that you are a fit for the role you are applying to and to explore your career history. In this interview, we’ll learn more about the hard and soft skills you possess to help determine if you’d be a good fit for us.

Assessments: Not every role consists of an assessment, but if yours does, it will be directly related to the job you apply for.

Interview(s) with your future colleagues: We call these focus interviews, and they are a time for you to learn more about your role from someone you will closely collaborate with. It’s also a time for us to see how we align in terms of competencies and expected outcomes of the role.