Role in brief
Jito Labs is seeking a Security Engineer to secure core Solana infrastructure, focusing on identity management, product security reviews, and bug bounty operations. This role suits a mid-level professional with a software engineering background and experience in product security, capable of autonomous work within a small team.
About the role
This role involves enhancing security across critical Solana infrastructure, which processes billions in daily transaction value. The work includes managing identity and access, conducting security reviews for Jito's product portfolio, and overseeing bug bounty operations. The Security Engineer will also contribute to AI security research and tooling, as well as software supply chain monitoring.
The team is small, around 25 people, and operates with a high degree of autonomy. Success in this position means effectively identifying and mitigating security risks, ensuring the integrity of Jito's core infrastructure, and proactively addressing emerging threats, including those related to AI and software supply chain vulnerabilities.
Jito Labs is focused on building core infrastructure for Solana's economy, including the Jito-Solana validator client and JitoSOL liquid staking token. The company emphasizes tackling complex problems and moving quickly, indicating a dynamic environment where individuals are expected to take significant ownership of their work.
The salary for this position is competitive, ranging from $175,000 to $195,000 USD, with above-market total compensation and equity.
Skills that matter here
- Rust: Proficiency in systems or backend languages like Rust is required for building and securing production systems.
- Go: Experience with Go is valuable for developing and securing the backend infrastructure.
- Python: Python skills are useful for building security tooling, automation, and potentially for AI security research.
- C++: Knowledge of C++ is relevant for working with systems-level components and ensuring their security.
- Linux: Familiarity with Linux environments is necessary for securing the underlying operating systems of their infrastructure.
Who this role suits
- A software engineer with at least 5 years of professional experience, including a focus on product or application security.
- Someone who is comfortable taking high ownership and working independently within a small team.
- An individual with strong written communication skills who can thoughtfully approach complex security challenges.
- A professional interested in AI security and capable of building adversarial testing tools.
From the employer
- Identity and access management: provisioning, lifecycle operations, and monitoring for critical changes
- Security reviews across our product portfolio: threat modeling, code review, fuzzing, and functional testing
- Day-to-day bug bounty operations: triage, remediation tracking, and escalation of high-severity findings
- AI security research and tooling: adversarial testing frameworks for agent controls
- Software supply chain monitoring: malicious package detection beyond standard CVE scanning
- External penetration test coordination: scoping, logistics, and post-engagement remediation tracking
- Compliance documentation and evidence gathering as requirements emerge
- Software engineering background with experience in building production systems
- Fluent in product security lifecycle: threat modeling, secure design review, whitebox code review, and vulnerability testing
- Solid understanding of identity and access management concepts and tooling
- Interest in AI security with ability to build adversarial testing tooling
- Thoughtful approach to software supply chain risk
- Strong written communication skills
- Comfortable with high ownership and working autonomously on a small team
- Bachelor's degree in Computer Science, Computer Engineering, or related field
- 5+ years of professional experience, including software engineering
- Proficiency in systems or backend languages (e.g. Rust, Go, Python, C++)
- Experience in product or application security
- Track record of building security tooling or automation
- Experience conducting or leading security reviews
- Salary based on experience
- Above-market total compensation and multiple forms of equity
- 100% employer-paid health benefits
- All-expenses-paid team retreats and conferences
- Weekly meal voucher
Questions about this role
What is the remote work policy for this position?
This is a fully remote position.
What is the expected seniority level for this role?
This role is for a middle-seniority level professional.
What is the salary range for this position?
The salary for this position ranges from $175,000 to $195,000 USD.