Security Engineer (Europe)

📋 Description

• • You will be the tip of the spear in Tempo’s mission to move trillions of dollars on-chain without a single cent lost. Instead of waiting for auditors or bounty hunters, you will run a 24/7 internal Red Team whose only KPI is “break everything before the adversaries do.” Every line of code you write is either an exploit or a defense—there is no middle ground.
• • Day-to-day you will author high-performance Rust fuzzers that hammer our consensus engine, bridge contracts, and execution client at millions of iterations per second. When a fuzzer surfaces a panic or an arithmetic edge case, you will reduce it to a minimal proof-of-concept, weaponize it into a mainnet-grade exploit, and then hand the patched fix to the engineering team before breakfast.
• • You will simulate economic attacks on our private testnet: mint infinite stablecoins, grief validators, siphon MEV, bribe relayers, and game staking rewards until the protocol’s incentives bend or break. Your findings will feed directly into tokenomics redesigns and on-chain parameter votes, giving you a seat at the table where core protocol decisions are made.
• • You will dissect the EVM byte-for-byte—opcode by opcode, storage slot by storage slot, precompile by precompile—to uncover hidden gas optimizations and consensus-level quirks that auditors missed. When a new Ethereum hard-fork lands, you will be the first to diff the specs and tell us which change quietly introduced a double-spend vector.
• • You will build custom security tooling because off-the-shelf scanners were built for yesterday’s threats. Think symbolic-execution engines that understand Tempo’s novel fee markets, differential-testing harnesses that compare our Rust client against Geth and Nethermind, and real-time anomaly detectors that scream in Slack the moment validator signatures deviate from statistical norms.
• • You will embed with feature teams during design reviews, turning architectural diagrams into adversarial threat models. When the payments team wants to add instant finality for DoorDash’s payout flow, you will map out the slashing conditions, replay vectors, and cross-domain bridge race conditions that could freeze millions in merchant funds.
• • You will curate an internal “Wall of Shame” dashboard that tracks every bug bounty submission, CTF write-up, and Mainnet incident across the industry. Your weekly Red-Team briefings will turn that chaos into actionable intel, ensuring Tempo patches yesterday’s hacks before they become tomorrow’s headlines.
• • You will mentor junior security engineers and run internal CTFs where the prize is bragging rights and a custom hoodie. Your leaderboard will become a recruiting funnel, attracting the next generation of white-hat talent who refuse to settle for “good enough” security.
• • You will present at conferences, publish zero-day research, and drop 🔥 tweets that make the industry rethink what “secure by design” actually means. Your work will be open-sourced whenever possible, raising the bar for the entire L1 ecosystem.
• • Success is measured not by tickets closed but by incidents that never happen. When the next billion-user platform integrates Tempo and users don’t even notice the security layer, you will know you have done your job.