About the company
Vac builds public good protocols for the decentralised web. As an integral part of the Logos collective, Vac comprises R&D Service Units, Incubator Projects, Deep Research, and the RFC (specification) process for Logos projects. We do applied research based on which we build protocols, libraries, and publications. As custodians of these protocols, our aim is to adhere to a set of principles that ensure their alignment with our core values and objectives.
Job Summary
Key responsibilities:
📍Perform in-depth manual and automated reviews of source code (with a focus on low-level languages such as Rust, Nim, and C++) to identify security vulnerabilities and logic flaws. 📍Analyse and review critical code paths for potential weaknesses. 📍Identify and assess both code-level vulnerabilities (e.g., buffer overflows, injection flaws) and protocol-level issues (e.g., insecure cryptographic implementations, protocol misconfigurations). 📍Execute incident response activities, including detection, analysis, containment, and recovery, while documenting findings and lessons learned for continuous improvement. 📍Collaborate with development and product teams to remediate identified vulnerabilities, provide security guidance, and ensure secure coding practices are followed. 📍Define clear audit objectives and scope for external audits, focusing on the most critical components and protocols. 📍Prepare and organise all relevant documentation (architecture diagrams, codebase, threat models, protocol specifications) to facilitate an efficient and valuable external audit process. 📍Engage with external auditors early to clarify expectations and provide necessary context, ensuring the audit delivers actionable results. 📍Address and remediate issues identified in previous audits, and document improvements to demonstrate ongoing security maturity.
You ideally will have:
📍Minimum of 5 years of experience in Web3 security engineering, with proven experience securing blockchain protocols, smart contracts, or cryptographic systems. 📍Proficiency in low-level programming languages (Rust, Nim, C++). 📍Expertise in secure coding practices, including identification of code/protocol-level vulnerabilities (e.g., buffer overflows, injection attacks) and code analysis/debugging. 📍Experience with manual/automated code review techniques and penetration testing in Web3 ecosystems. 📍Familiarity with cryptographic protocols, secure protocol design, and blockchain/distributed systems security.
If you’re passionate about blockchain and decentralized technologies, explore more opportunities in web3 and cryptocurrency careers.
