Product Security Engineer – DeFi
$179k - $226k USD
Who are we?
FalconX is a pioneering team of operators, investors, and builders committed to revolutionizing institutional access to the crypto markets. Operating at the intersection of traditional finance and cutting-edge technology, FalconX addresses the industry's foremost challenges: Navigating the digital asset market can be complex and fragmented, with limited products and services that support trading strategies, structures, and liquidity found in conventional financial markets. As a comprehensive solution for all digital asset strategies from start to scale, FalconX operates as the connective tissue empowering clients with seamless navigation through the ever- evolving cryptocurrency landscape.
Location: Remote / Hybrid
Role
FalconX is seeking a Product Security Engineer to focus on DeFi product and application security. You will partner with engineering and product teams to review proposed strategies, assess smart contracts for security risks, and guide secure design decisions.
This role reports into the FalconX Security Team, and in addition to DeFi-focused work, you’ll contribute to broader application security initiatives such as data security, identity and access management (IAM), secure development lifecycle (SDLC), and code review practices.
Responsibilities
- Review DeFi strategies, protocol designs, and smart contracts for security risks and failure modes.
- Evaluate markets-related activities (e.g., liquidity provision, governance, cross-protocol integrations) for systemic vulnerabilities.
- Provide secure design input for new features and applications.
- Identify and mitigate threats including reentrancy, oracle manipulation, flash loan exploits, MEV, and governance exploits.
- Partner with the security team to advance application security initiatives:
- Threat modeling and design reviews.
- Data security and access control design.
- Identity and access management (IAM).
- SDLC improvements and developer enablement.
- Collaborate with external auditors and internal stakeholders to validate findings and track remediation.
Requirements
- 4+ years in application/product security, with strong exposure to DeFi protocols and markets.
- Expertise in smart contract security (Solidity, EVM internals, known attack classes).
- Experience with threat modeling and secure design reviews.
- Familiarity with DeFi primitives (AMMs, lending, oracles, governance, bridges).
- Understanding of cryptography, key management, and wallet security.
- Strong ability to articulate risks and propose secure alternatives.
Preferred
- Contributions to security research, audits, or open-source tooling in DeFi.
- Background in data security, IAM, or application-layer controls.
- Experience in financial markets or risk assessment.
The base pay for this role is expected to be between $179,000-226,000 USD for a Senior Associate level in the New York City and San Francisco Bay Area. This expected base pay range is based on information at the time this post was generated. This role will also be eligible for other forms of compensation such as a performance linked bonus, equity, and a competitive benefits package. Actual compensation for a successful candidate will be determined based on a number of factors such as location, skillset, experience, qualifications and the level at which the candidate is hired.
Notice at Collection and Privacy Policy
Applicants located in California and/or applying to a role based in California, please refer to our Notice at Collection and Privacy Policy here.
Inclusivity Statement
FalconX is committed to building a diverse, inclusive, equitable, and safe workspace for all people. Our roles are intended for people from all walks of life. We encourage all those interested in applying to our organization to submit an application regardless if you are missing some of the listed background requirements, skills, or experiences!
As part of our commitment to inclusivity, FalconX would like to acknowledge that the EEOC survey has limited potential responses that you can select. For legal reasons, FalconX must use this language to align with federal requirements, however, we want to ensure that you are able to provide a response to our own voluntary survey questions about your identity that best aligns with your most true self.
FalconX is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, national origin, ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, or any other legally-recognized protected basis under federal, state, or local law.
Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on FalconX. Please inform FalconX’s People team at recruiting@falconx.io, if you need assistance with participating in the application process.