Lightning Labs is hiring a Senior Security Engineer (Remote) in Engineering — Lightning Labs. The overview below is synthesized from the employer posting on jobs.ashbyhq.com: factual requirements and scope are preserved, but prose is rewritten with editorial context. Verify details and apply via the employer link.
Lightning Labs is seeking to hire a Security Engineer for the ongoing scaling of our growing engineering organization. This is a hands-on role that consists of devising and implementing policies and procedures around best practices in systems security.
As we are an international organization, experience and comfort working with highly distributed teams is a must. In addition, the ideal candidate should have a passion for our mission of bringing financial freedom to the world, as well as for Bitcoin as a whole.
Responsibilities may include but are not limited to:
- Designing and deploying active fuzzing, black+white box testing and penetration testing infrastructure for open source and production systems
- Performing security audits and review of both internal production systems as well as open source software which interacts with Bitcoin+Lightning in a security critical manner
- Provide mentorship and guidance to level up your teammates
- Creating global security policy, standards, guidelines, and procedures to ensure ongoing maintenance of security
- Overseeing security aspects of software release processes and infrastructure
- Determining security team requirements for future growth
- Developing and ensuring responsiveness of security incident management processes
- Performing risk management assessments
Preferred experience:
- At least 5 years prior experience in in systems security
- An ability to work with a high impact, fast-moving startup team
- Extensive knowledge of operating system and computer architecture internals
- Strong understanding of cryptography, protocol design and adversarial analysis
- Experience in reverse engineering and exploiting of cryptographic protocol (cryptocurrencies like Bitcoin) systems
- Extensive expertise with professional software development experience in Go, Rust, C/C++, and/or Java
- Experience in security incident response
- Experience in security code review and vulnerability triaging
- Prior experience running an open source facing bug bounty program
- 2+ years management experience or experience as a senior decision maker
- Experience working with remote teams
- Experience working with Kubernetes and AWS infrastructure
- Working knowledge of fundamental Bitcoin and Lightning design principles
- Candidates with additional experience are welcome to apply as we are open to adjusting the role accordingly
Build a standout application
For the Senior Security Engineer (Remote) at Lightning Labs, reviewers look for concise evidence over buzzwords. Mirror the language of the posting sparingly, quantify support or delivery outcomes, and show how you handled ambiguity, time-zone collaboration and user empathy. Keep your resume to impact, keep your cover note to one page, and link to artifacts — tickets resolved, docs shipped, dashboards owned — that prove you can operate in a fast-moving Web3 team. Prepare to discuss a time you turned a confusing user report into a clear fix and how you measure quality in support and operations.
Web3 hiring values reliability: on-time follow-through, clear writing, and a track record of improving runbooks and tooling. Treat the application as a work sample. For interviews, be ready to walk through how you prioritize across time zones, handle a difficult user, and decide when to escalate versus resolve directly. Show how you document decisions so the next teammate benefits.
In a distributed Web3 org, trust builds through written clarity. Use the cover note to demonstrate it. Add links to public work, keep formatting scannable, and close with a clear ask. Hiring managers skim — make impact obvious in the first half-page.
Career growth in Web3 rewards continuous learning. Follow protocol changelogs, practice with testnets, and contribute to open issues. Small, consistent contributions compound into credibility more than one-off credentials.