Protocol Security Engineer

The Monad Foundation

The Monad Foundation is a team of dedicated ecosystem and community builders who are on a mission to massively grow the impact of decentralized tech. We believe that the Monad blockchain—the performant and parallel EVM Layer 1—will help decentralized apps eat the world.

The Role

We are looking for a Senior Security Engineer who will be responsible for safeguarding Monad Protocol codebases with a focus on the Execution and Consensus Clients. You bring expertise in preventative techniques as well as vulnerability detection and remediation. You will have advanced technical skills and complementary people skills to educate and disseminate sound practices to the org and ecosystem alike.

What You Will Do

• Protocol Improvement: Contribute to Monad protocol improvement proposals emphasizing security considerations.
• Security Controls: Propose and implement security controls related to the Monad consensus and execution clients.
• Bug Bounty: Participate in triage and assist with patch reviews for remediations.
• R&D: Stay up to date with the latest EVM research and conduct your own analysis on the Monad protocol (block and transaction patterns, node resource consumption, hardening strategies, etc.).
• Code Review and Testing: Perform in-house audits of consensus / execution client releases using both manual and automated methods such as code review, extending fuzzing suites, and static analysis.
• Thought Leadership: Be an advocate for Monad Foundation priorities when working with core protocol developers and validator operators. Share findings, reports, and practices with the broader Monad Ecosystem.

Who You Are

• Base EVM Layer L1/L2 Expertise: Experience reviewing consensus clients, execution clients, and related codebases.
• Threat Prevention: Through threat modeling, risk assessments, and secure design reviews.
• Invariant / Property-Based Testing: Proficient in using dynamic, symbolic, or formal methods.
• C++ and Rust Proficiency: Experience auditing Rust and C++ codebases in L1 and L2 base layer components.
• Proven Track Record: Of finding critical vulnerabilities through auditing, bug bounties, or red teaming. Public write-ups, CVEs, or contributions to protocol hardening.

Nice to Have

• Tool Development: Experience building or extending security-focused tools (e.g., Slither detectors, static analyzers, etc.)
• Leadership and Mentoring: Direct experience leading or coaching team members, guiding junior/intermediate teammates to senior levels.
• Talks and Publications: Active knowledge sharing in the web3 security community and broader ecosystem.

Why Work with Us

• Challenging problems. You’ll work on extremely challenging problems with massive impact.
• Huge opportunity. The Ethereum Virtual Machine (EVM) standard is ubiquitous, but existing EVM-compatible chains are slow and bandwidth-constrained. Monad’s core innovations offer developers the best of both worlds (portability and performance) and are a game-changer for mass user adoption in crypto.
• The right team. You’ll be part of an exceptional and highly-motivated team.
• Culture. We’re a lean team working together to achieve very ambitious goals. We are united in our culture of collaboration, low ego, and high-quality output. As an early member of our team, you’ll help continue to shape our culture.

Salary and Benefits

Benefits for full-time employees may include medical, dental, and vision insurance (100% coverage for employees); generous paid time off; paid parental leave; and 10 company-observed holidays.

When applying, mention the word CANDYSHOP to show you read the job post completely.