Blockchain Security Engineer - (Solidity / Rust / Golang)

About the role

This position focuses on securing Web3 projects by identifying and remediating vulnerabilities in smart contracts, blockchain protocols, and decentralized applications. The work involves thorough code reviews and security analysis. A key aspect of the role is to conduct guided security research, exploring potential attack vectors to provide insights that enhance overall security measures.

The successful candidate will also contribute to the development and maintenance of internal security tools and frameworks. This includes supporting improvements to existing processes, methodologies, and service offerings to ensure high-quality delivery for CertiK's clients. This role is integral to maintaining the company's position as a leading blockchain security auditor.

CertiK is recognized for securing a significant volume of digital assets and working with numerous enterprise clients, including major projects like OKX and Ripple. Joining this team means contributing to a critical function within the blockchain ecosystem, ensuring the integrity and safety of digital assets and protocols for a wide range of industry leaders.

The target annual salary for this role performed in the US is between $102,000 and $180,000.

Skills that matter here

• Solidity: Used for auditing smart contracts on EVM chains to identify and fix security flaws.
• Rust: Applied in reviewing blockchain protocols and dApps, and potentially in developing security tools.
• Golang: Utilized for analyzing blockchain infrastructure and contributing to internal security tool development.
• Python: Employed for scripting, automation, and security analysis tasks within the auditing process.
• Smart contracts: Central to the role, requiring hands-on experience to audit and secure various blockchain implementations.
• Blockchain protocols: Involves understanding and securing the underlying mechanisms of different blockchain networks.

Who this role suits

• A person with a strong academic background in computer science, mathematics, or information security.
• Someone with at least one year of practical experience working with blockchain technologies and smart contracts.
• An individual who is proficient in threat modeling, risk assessment, and security analysis.
• A candidate with a genuine passion for cryptocurrency, DeFi, and blockchain technologies.

From the employer

• Audit and review codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to identify and remediate vulnerabilities.
• Conduct guided security research, explore new attack vectors, and deliver actionable insights.
• Contribute to the design, development, and maintenance of internal security tools and frameworks.
• Support improvements to internal processes, methodologies, and service offerings, ensuring high-quality delivery for clients.

• Bachelor’s, Master’s, or PhD in Mathematics, Computer Science, or Information Security.
• At least 1 years of hands-on experience with blockchain technologies, including: Smart contracts (EVM chains, Solana, Move, etc.), Blockchain protocols (nodes, SDKs, Cosmos, etc.)
• Experience in threat modeling, risk assessment, and security analysis.
• Proficiency in one or more programming languages: Rust, Go, Solidity, Python, etc.
• Passion for Cryptocurrency, DeFi, and Blockchain technologies.

• Target annual salary for this role performed in the US is $102,000 - $180,000.
• CertiK offers medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees.
• Flexible paid time off and holidays.
• CertiK is proud to be an equal opportunity employer.