About Us

Eigen Labs is more than just a leading name in the blockchain space. We’re the driving force behind EigenLayer, a game-changing solution that revolutionizes crypto-economic security. Imagine a world where blockchain projects break free from the shackles of the scaling trilemma and capital limitations.

We’re building a platform to deliver security to novel distributed applications. In today's blockchain ecosystem, each service is typically secured by its own tokenized trust-network. With EigenLayer, services can build upon the established security of the Ethereum trust network, unlocking untold scalability while maintaining security and decentralization.

About the Role

As an Application Security Engineer, you will be at the forefront of security in the Eigen Ecosystem by securing the frontend & backend applications and software supply chain that power EigenLayer. You will be responsible for identifying, mitigating, and preventing security risks in our web interfaces, SDKs, and dependencies, ensuring a secure developer and user experience. Your goal is to embed security into the development lifecycle and work closely with engineering teams to harden applications against attacks and design automated security tooling to detect and prevent threats. This role will contribute individually and as part of the EigenLayer security team, helping developers build secure, performant, and scalable systems while protecting the broader software ecosystem from emerging threats.

Responsibilities

• Conduct comprehensive design reviews, threat modeling, and code reviews for new features and products.
• Identify gaps in our software development process and take initiative leading efforts to address them.
• Educate and train the engineering teams on secure coding best practices.
• Investigate vulnerabilities reported via our bug bounty platform, determining their root cause and severity.
• Identify vulnerabilities to enable quick action by the engineering team.

Qualifications

• 3+ years of experience building and securing software
• Interest or existing experience in web3
• Strong understanding of web application security, including OWASP Top 10 vulnerabilities
• Familiarity with DevSecOps and CI/CD best practices
• Proficiency in TypeScript, Golang application development.
• Knowledge of cloud security, including AWS
• Proven experience in security design reviews, threat modeling, or security testing.
• Excellent written and verbal communication skills.