Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 62 days ago

Senior Application Security Engineer

RootstockLabs Ltd.9 open roles

Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Application Security EngineerRootstockLabs Ltd. · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on RootstockLabs Ltd.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. RootstockLabs Ltd. postings stay open a median of 45 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 62 days ago

RootstockLabs Ltd. median: 45 days open

The posting

NOTE: As part of our hiring process, we conduct background and reference checks at the to validate relevant experience, qualifications, location and professional history.

ABOUT THE ROLE

As an Application Security Engineer at RootstockLabs, you will help secure our Bitcoin-secured DeFi infrastructure by reviewing code, smart contracts, and protocol changes, and by building the security automation that keeps our development lifecycle safe. You will work closely with development teams on threat modeling and architecture reviews, manage our bug bounty program end to end, and coordinate external security audits with third-party auditors. You will also research attack techniques relevant to our ecosystem (EVM, bridges, p2p) and translate them into concrete defenses, and support incident investigations when application-layer issues arise.

KEY RESPONSIBILITIES

  • Perform security reviews of source code, smart contracts, and protocol changes across RootstockLabs projects
  • Participate in design and architecture reviews; threat-model new products and features with development teams
  • Triage and validate bug bounty reports; assess severity and coordinate remediation with engineering
  • Collaborate on external security audits: scope engagements and work with third-party auditors through to the resolution of findings
  • Build and operate security automation, including AI-assisted code review, scanning, and findings-triage pipelines
  • Research attack techniques relevant to the ecosystem (EVM, bridges, p2p) and turn findings into concrete defenses: monitoring alerts, CI security checks, and hardening changes
  • Support incident investigations when application-layer issues arise

WHAT YOU BRING

  • 3+ years of experience in Application Security or Security Engineering
  • Solid grasp of common vulnerability classes (OWASP Top 10) and secure code review in Java plus at least one of TypeScript/JavaScript, Python, Go, or Rust
  • Hands-on experience with blockchain security: smart contract auditing (Solidity/EVM) or protocol/node-level security
  • Experience building and operating security automation, AI-assisted workflows (LLM-based triage, code review, or scanning), SAST/DAST, dependency and secret scanning, and CI/CD security gates
  • Fluent English

NICE TO HAVE

  • Experience in bug bounty triage or vulnerability disclosure programs
  • Experience mitigating network-level attacks (p2p, eclipse, DoS) or analyzing consensus-level attack scenarios
  • Offensive security background (pentesting, red team, CTFs, exploit development)
  • Public security research: CVEs, bug bounty track record, audit reports, conference talks
  • Knowledge of C/C++ (for node/client codebases)
  • Experience with fuzzing (smart contracts or native code)

ROOTIES BENEFITS

At RootstockLabs, we don’t just offer a job, we offer a community. Here’s what you can expect when you join us:

  • Competitive compensation package and unique benefits designed to support your growth and well-being.
  • 100% Remote Work working within a Central European to Argentinian time-zone window (UTC-3 to UTC+2, with about an hour's flexibility either side), and with access to global coworking spaces.
  • Work-Life Balance: Paid vacation and sick leave days
  • Continuous Learning: Access to training programs, language courses, and learning sponsorship annually.
  • Unique Projects: Work with cutting-edge blockchain technology in a global, diverse team.

ABOUT ROOTSTOCKLABS

RootstockLabs is a key contributor to Rootstock, Bitcoin's Financial Infrastructure for lending, yield, and onchain capital markets. We build and commercialize the institutional infrastructure that turns Bitcoin into productive capital.

  • What we do: Develop and commercialize Bitcoin-backed lending, tokenized real-world assets, and onchain financial strategies
  • Who we work with: Leading custodians, asset managers, and financial institutions
  • Why it matters: Rootstock is secured by 80%+ of Bitcoin's hash power and has run with 100% uptime since 2018 (bringing Ethereum-style programmability to the world's hardest money).
  • Proof it works: 200+ dApps live on Rootstock, from BTCFi protocols like Sushiswap and Oku to institutional names like Mercado Bitcoin, Animoca Brands, and Paystand
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against RootstockLabs Ltd.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on RootstockLabs Ltd.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    RootstockLabs Ltd.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.