You will own product and infrastructure security across Squads, working closely with the Head of Security, CTO, and engineering leads. This hands-on role involves reading code, writing threat models, and building tooling and standards for secure engineering practices.
Key Responsibilities
- Join product and engineering calls as the security reviewer, raising concerns while designs are still cheap to change.
- Lead threat modeling and security design reviews for new products, features, and infrastructure changes.
- Perform hands-on secure code review across backend services, APIs, frontends, and Solana programs.
- Own the full lifecycle for findings from audits, pentests, code scanning, and bug bounty.
- Set severity and SLA standards, and hold the team to them.
- Run bug bounty intake, validate external reports against source, coordinate with audit partners.
Qualifications & Requirements
- Fintech
- Crypto
- Payments
- Stablecoins
Preferred / Nice-to-Have Qualifications
- Experience reviewing Solana programs (Rust/Anchor).
- Experience working at an audit firm.
- Experience with cryptography and key management (HSMs, MPC, PKI).
About Squads
Squads is the leading smart account and multisig infrastructure on Solana, securing over $10B in assets across major protocols, venture funds, and Web3 enterprises. Through Squads Protocol and Squads Pro, teams manage multisig treasuries, program upgrades, validator staking, and automated permissions with institutional security. Squads is formally verified and trusted as the security standard across the Solana ecosystem. The engineering culture values formal verification, Rust security, and rock-solid UI design. Squads Protocol provides formally verified multisig smart account infrastructure on Solana, securing treasury management, program upgrades, and permissions for top Web3 enterprises. Squads Protocol provides formally verified multisig smart account infrastructure on Solana, securing treasury management, program upgrades, and permissions for top Web3 enterprises.