Principal Security Engineer (Solana)
About This Role
This is a rare opportunity to operate at the bleeding edge of blockchain security, where your expertise directly safeguards distributed ledger ecosystems from emerging threats. You'll shape security architecture for mission-critical web3 infrastructure, mentor engineering teams, and influence how the broader crypto industry approaches risk management. If you thrive on solving complex, high-stakes security puzzles, this role offers unmatched impact.
What You'll Be Doing
Lead deep-dive security audits of Solana smart contracts, programs, and on-chain logic
Architect robust defense strategies against exploits targeting decentralized applications and DeFi protocols
Perform threat modeling and penetration testing across validator infrastructure and node operations
Collaborate cross-functionally with engineering, product, and protocol teams to embed security-first thinking into every release
Research novel attack vectors unique to the Solana runtime and distributed systems at large
Establish and refine internal security standards, tooling, and incident response playbooks
What We're Looking For
Proven track record securing blockchain protocols, with hands-on Solana experience strongly preferred
Deep understanding of smart contract vulnerabilities, cryptographic primitives, and distributed systems design
Several years of experience in security engineering, red teaming, or protocol auditing within crypto or fintech
Strong command of Rust and familiarity with Solana's runtime architecture
Ability to communicate complex technical risks clearly to both engineers and leadership
Self-directed mindset suited to remote, fast-moving web3 environments
Bonus Points
Published security research, CVEs, or audit reports within the blockchain space
Experience with formal verification tools or fuzzing frameworks for smart contracts
Active contributions to open-source Solana or DeFi security tooling
Familiarity with cross-chain bridge security and MEV-related vulnerabilities
Why Join Us
Competitive compensation with meaningful token and equity upside
Fully remote, flexible culture built around trust and autonomy
Direct influence over the security posture of real-world decentralized finance infrastructure
Continuous learning budget and access to top-tier security conferences and research communities
About OpenZeppelin
OpenZeppelin is a leading blockchain security company dedicated to securing the decentralized web. We build and maintain the most widely used open-source libraries for smart contract development, providing essential tools and services that underpin the security of countless Web3 projects, from DeFi protocols to NFT platforms and DAOs. Our mission is to empower developers and organizations to build secure and robust decentralized applications with confidence. Our culture thrives on innovation, collaboration, and a deep commitment to open source principles. We're a team of passionate blockchain security experts, cryptographers, and engineers who prioritize rigorous research, transparency, and continuous improvement. We foster an environment where challenging problems are embraced, new ideas are encouraged, and contributions are recognized internally and across the wider crypto community. At OpenZeppelin, you'll work alongside pioneers in the Web3 space, contributing to foundational infrastructure that shapes the future of digital trust. Join OpenZeppelin and become an integral part of securing the blockchain revolution. You'll have the opportunity to work on cutting-edge security challenges, contribute to widely adopted open-source projects, and make a tangible impact on the safety and reliability of the decentralized ecosystem. If you're a talented individual passionate about blockchain security and want to help build a more secure Web3, we invite you to explore our career opportunities and help us secure the next generation of internet.
Ready to Apply?
To submit your application for this position, please visit OpenZeppelin's official website and follow their application process.