Application Security Engineer
Description
We are seeking a Senior Application Security Engineer to join our team. This role involves conducting comprehensive security audits of smart contracts, identifying and analyzing vulnerabilities, and providing strategic recommendations for risk management and protocol design. You will work with cutting-edge technologies in a fast-growing business group, contributing to the security of Web3/DeFi projects.
Responsibilities
- Conduct comprehensive security audits of smart contracts (Solidity, TVM/TRON)
- Identify and analyze vulnerabilities (reentrancy, access control, flash loan attacks, oracle manipulation, etc.)
- Review protocol architecture, identify single points of failure and key risks
- Audit and provide recommendations on access control models and custom role systems
- Review multisig setup on Fireblocks (signers, thresholds, role distribution, best practices)
- Analyze DeFi integrations (Aave, Morpho) and capital allocation strategies
- Develop recommendations for risk management and safety mechanisms (pause, emergency controls, circuit breakers)
- Prepare detailed audit reports with severity levels and remediation steps
- Provide strategic advisory on protocol design, guardrails, and incident response
Requirements
- Solidity (advanced level)
- Smart contract auditing tools (Slither, Aderyn, Foundry, Echidna, etc.)
- Deep understanding of EVM architecture and security patterns
- Experience with DeFi protocols (especially Aave and Morpho)
- Multisig wallet security (Fireblocks experience is highly preferred)
- TRON / TVM (TRON Virtual Machine)
- Invariant testing and formal verification tools
- Experience with capital management / vault contracts
- Knowledge of OpenZeppelin Contracts and security libraries
- Python or JavaScript for scripting and monitoring
Benefits
- Paid vacations, sick leave, personal events days, days off
- Corporate health insurance program for your well-being
- Referral program enjoy cooperation with your colleagues and get the bonus
- Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences
- Rewards program for mentoring and coaching colleagues
- Free internal English courses
- Yoga classes to help you stay active and energized
- In-house Travel Service
- Multiple internal activities: online platform for employees with quests, gamification, presents and news, RedCore clubs for movie / book / pets lovers, special office days dedicated to holidays
- Corporate events, team buildings
About Pin-Up Global
PIN-UP Global is an international holding specializing in the development and implementation of advanced technologies, B2B solutions, and innovative products for the iGaming industry.