Conduct advanced application security assessments across APIs, web and mobile applications, wallet software, browser extensions, SDKs, and desktop applications. Identify vulnerabilities, architectural flaws, and attack paths across off-chain and on-chain systems. Collaborate with smart contract auditors and cryptography researchers, engage clients and developers, scope assessments, automate testing, and deliver concise security reports and mitigation guidance.
Hexens.io is looking for a Senior Information Security Engineer with a strong focus on application security to join our team. At Hexens.io, we deliver cutting-edge cybersecurity services with a core emphasis on blockchain technology. We address complex security challenges, protecting applications and infrastructures that handle multimillion-dollar digital assets.
Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.
Responsibilities:
- Alongside our off-chain security lead, plan and deliver advanced application security assessments against API services, application front-ends, wallet software, browser plugins, mobile apps, and SDKs.
- Collaborate with leading smart contract auditors and cryptography researchers, leveraging your application security expertise to assess attack surfaces outside their on-chain specializations.
- Work to identify technical vulnerabilities, architectural flaws, and ways to mitigate future risk in the crucial junctions between off-chain and on-chain systems.
- Interact with developers and key stakeholders when identifying and handling security issues.
- Deliver clear and concise reporting on issues and attack paths identified.
Required skillset:
- At least 5 years experience, or equivalent technical expertise, delivering offensive security services, with a primary focus on application security.
- Expert-level web application and API security experience, with proficiency assessing apps with modern web frameworks, and identifying advanced client-side, back-end, and business logic attacks.
- Experience assessing mobile applications (Android/iOS), browser extensions, and desktop applications.
- Practical experience finding complex vulnerabilities and attack paths in Golang, Rust, TS/JS, Python, Java, or C-based codebases during white/grey-box appsec assessments.
- Working knowledge of cloud, CI/CD, container, CDN, and network security concepts, and how they apply to application security.
- Knowledge or willingness to learn web3 security concepts and how they apply to web3-centric applications.
- Decent scripting and automation skills.
- Assisting with scoping requirements for application security work.
- Strong client-facing and soft skills.
Big plus if any of the following apply:
- Significant web2 bug bounty/vulnerability disclosure history.
- Prior experience as a smart contract auditor or onchain-focused security researcher.
- Prior experience developing or integrating DeFi protocols, smart contracts, wallet services, or other web3 services.
- Advanced relevant security certifications (OSWE, Burp Suite Certified Professional, etc.)
Benefits:
- Work alongside industry-leading specialists
- Opportunity to work with the most exciting and prominent companies in the industry
- Highly competitive salary
- Great work environment
Similar Jobs
Information Technology • Productivity • Professional Services • Software • Business Intelligence
Leads product marketing and competitive intelligence for M-Files’ AI-powered document management platform, with emphasis on manufacturing, quality, and regulated industries. Owns positioning, messaging, go-to-market launches, market intelligence, competitive analysis, sales enablement, thought leadership, and cross-functional alignment. Develops solution narratives, content, battlecards, training, and executive reporting while representing M-Files in webinars, events, analyst briefings, and customer engagements.
Top Skills:
AICloud ComputingCompetitive IntelligenceContent ManagementDocument ManagementInformation GovernanceKnowledge ManagementMicrosoft SolutionsSaaSWorkflow Automation
HR Tech • Information Technology • Professional Services • Sales • Software
Lead UK payroll implementations for SMB and mid-market customers from kickoff through data migration, configuration, training, first live payroll, and handover. Manage multiple projects, validate and reconcile payroll data, configure systems, guide customers through integrations, resolve discrepancies, communicate risks, and coordinate cross-functional teams. Contribute to process improvements as the UK Payroll function scales.
Top Skills:
Hibob Uk PayrollHrisSaaSSalesforce
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Supports the Global Lead in executing people strategy across workforce planning, organizational design, leadership effectiveness, culture, change management, succession planning, and transformation. Conducts workforce analytics, develops strategic insights, coordinates talent reviews, maintains succession and development plans, and partners with senior leaders to implement organizational changes and global programs.
What you need to know about the Manchester Tech Scene
Home to a £5 billion digital ecosystem, including MediaCity, which consists of major players like the BBC, ITV and Ericsson, Manchester is one of the U.K.'s top digital tech hubs, at the forefront of advancements in film, television and emerging sectors like as e-sports, while also fostering a community of professionals dedicated to pushing creative and technological boundaries.
