Blockchain Security Engineer - (Solidity / Rust / Golang)

About the role

This role involves auditing and reviewing codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to find and fix security vulnerabilities. The engineer will also conduct guided security research, investigating new attack vectors and providing practical insights. This work directly contributes to securing Web3 projects for CertiK's clients.

The position is part of a team that provides security auditing services to a wide range of clients, including major projects like OKX and Ripple. CertiK has secured billions in digital assets and identified thousands of vulnerabilities. The engineer will help maintain CertiK's high standards by contributing to internal tool development and process improvements.

Success in this role means effectively identifying and remediating vulnerabilities in client code, contributing to security research that uncovers new threats, and helping to refine internal security practices. The engineer's efforts will support CertiK's mission to secure the blockchain industry at scale.

The target annual salary for this role performed in the US is between $102,000 and $180,000.

Skills that matter here

• Solidity: Used for auditing smart contracts on EVM-compatible chains.
• Rust: Applied when auditing blockchain protocols and smart contracts, especially on Solana or other Rust-based ecosystems.
• Golang: Utilized for reviewing blockchain protocols and potentially contributing to internal security tools.
• Python: Leveraged for scripting, tool development, and security analysis within the auditing process.
• Smart contracts: Central to the role, requiring experience with various platforms like EVM chains, Solana, or Move.
• Blockchain protocols: Involves understanding and auditing components like nodes and SDKs, including Cosmos.

Who this role suits

• A person with an academic background in computer science, mathematics, or information security.
• Someone with at least one year of practical experience working with blockchain technologies.
• An individual who is passionate about cryptocurrency, DeFi, and blockchain security.
• A candidate capable of performing threat modeling, risk assessment, and security analysis.

From the employer

• Audit and review codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to identify and remediate vulnerabilities.
• Conduct guided security research, explore new attack vectors, and deliver actionable insights.
• Contribute to the design, development, and maintenance of internal security tools and frameworks.
• Support improvements to internal processes, methodologies, and service offerings, ensuring high-quality delivery for clients.

• Bachelor’s, Master’s, or PhD in Mathematics, Computer Science, or Information Security.
• At least 1 years of hands-on experience with blockchain technologies, including: Smart contracts (EVM chains, Solana, Move, etc.), Blockchain protocols (nodes, SDKs, Cosmos, etc.)
• Experience in threat modeling, risk assessment, and security analysis.
• Proficiency in one or more programming languages: Rust, Go, Solidity, Python, etc.
• Passion for Cryptocurrency, DeFi, and Blockchain technologies.

• Target annual salary for this role performed in the US is $102,000 - $180,000.
• CertiK offers medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees.
• Flexible paid time off and holidays.
• CertiK is proud to be an equal opportunity employer.