Protocol Security Engineer

Audience: security leads, protocol engineers, governance contributors, and operators responsible for keeping a live protocol safe.

Outcomes

• Run security from design through launch, monitoring, incident response, and postmortems.
• Build threat models, audit plans, bug bounties, monitoring rules, and emergency procedures.
• Coordinate engineering, governance, legal, comms, and external responders during incidents.

Lifecycle

flowchart TD
  A[Design review] --> B[Threat model]
  B --> C[Implementation controls]
  C --> D[Testing and invariants]
  D --> E[Internal review]
  E --> F[External audit]
  F --> G[Fix verification]
  G --> H[Launch readiness]
  H --> I[Monitoring and alerting]
  I --> J[Incident response]
  J --> K[Postmortem and hardening]
  K --> A

Must Learn

Resource	Why
SEAL Frameworks	Practical security operations and incident readiness frameworks for crypto teams.
SEAL 911	Emergency response coordination path for severe crypto incidents.
OpenZeppelin Readiness Guide	Audit and launch preparation model for teams.
Immunefi	Bug bounty operations and vulnerability disclosure norms.
OWASP SCSVS	Verification standard for smart contract controls.

Operating Cadence

Cadence	Activity
Per design	Threat model, privilege inventory, invariants, abuse cases.
Per PR	Security-sensitive code review and test updates.
Pre-audit	Freeze scope, document assumptions, run tools, prepare deployment docs.
Pre-launch	Verify roles, multisigs, monitoring, runbooks, and rollback paths.
Weekly	Review alerts, dependencies, admin actions, governance proposals, and incidents.
Quarterly	Rehearse incident response and rotate stale access.

Use in Real Work

• Keep a living asset and privilege inventory.
• Require explicit risk acceptance for known issues before launch.
• Monitor contracts, admin actions, frontends, DNS, bridges, oracles, and governance.
• Prepare public and private incident communications before they are needed.
• Treat audit reports as inputs to a broader security program, not a launch certificate.