Senior Application Security Engineer

Polygon Labs

Senior Application Security Engineer focusing on security reviews and bug bounty management at Polygon Labs. Designing AI-powered security tools and collaborating with engineering teams in a remote-first environment.

Posted 5/11/2026full-timeRemote • ⛩ Anywhere in AsiaSeniorWebsite

Tech Stack

Tools & technologies

GoPythonSolidityTypeScriptWeb3

About the role

Key responsibilities & impact

Own end-to-end security reviews across smart contracts (Solidity), backend services (Go, TypeScript, Python), and frontend surfaces, producing written findings at the quality level of a top external audit firm, published and used as the internal standard
Build and ship an agentic security CI/CD pipeline: agent-driven review that runs autonomously against every PR and release candidate, reasons about changes in context, and gets smarter with each deployment
Design and maintain specialised AI-powered code reviewers tuned to specific vulnerability classes and surfaces, Solidity-aware, protocol-aware, and calibrated to the actual patterns Polygon's products surface
Triage and manage the bug bounty program: read incoming submissions daily, reproduce valid findings, separate signal from noise, assign severity, and route confirmed issues to engineering with enough context to fix them correctly, using custom AI workflows to maintain rigor at volume
Follow through on remediation: review proposed fixes, close out resolved findings, and push back where a fix addresses symptoms rather than root cause
Embed across engineering teams at all stages, sprint planning, design review, feature freeze, post-launch, as a working partner, not a sign-off function
Lead the team's AI security practice by example: build custom prompt chains, Claude Code workflows, and Codex integrations tailored to specific security tasks, then demo and share them so the whole team's baseline rises

Requirements

What you’ll need

Full-stack security fluency across multiple languages: you can drop into an unfamiliar codebase and produce a meaningful review within a day, Solidity, Go, TypeScript, and Python are the surfaces that matter most here
Smart contract security as a core competency: production experience auditing or building secure Solidity, deep familiarity with EVM internals, common DeFi protocol patterns, and the historical record of smart contract exploits
Proven AI workflow depth, not just tool usage: you have built custom prompt chains, CI integrations, and task-specific plugins (using tools like Claude Code and Codex) for security work specifically, and you can speak clearly about where AI accelerates and where human judgment is irreplaceable
Experience making security decisions under real time pressure in a Web3 environment, where speed and rigor have to coexist
A public portfolio that demonstrates your security thinking: audit reports, bug bounty writeups, research posts, or open-source tooling, something that shows what good looks like when you put your name on it.
Experience running or contributing to a structured bug bounty program (triage, researcher communication, severity calibration)
Direct exposure to payments protocols, stablecoin infrastructure, or regulated fintech environments
Prior work building security tooling that other engineers actually use, not just internal scripts, but something with adoption

Benefits

Comp & perks

Remote first global workforce
Industry leading Medical, Dental and Vision health insurance*
Company matching 401k with 3% match*
$1,500 Home Office Set Up Allowance (life-time max)
$200 Annual AI Allowance Program
$75 Monthly internet or phone reimbursement
Flexible Time Off
Company issued laptop
Egg freezing, mental health, and employee wellness benefits

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SolidityGoTypeScriptPythonsmart contract securityAI workflowsCI/CD pipelinebug bounty program managementsecurity auditingEVM internals

Soft Skills

leadershipcommunicationcollaborationproblem-solvingcritical thinkingtime managementadaptabilityattention to detaildecision-makingmentorship