Domains
About the Job
About the Company
CertiK leads blockchain security by securing smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world's top blockchain projects.
About You
You're a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You're comfortable with the unknown and understand that startup life means wearing multiple hats. You're accountable and obsessed with improvement, both in yourself and in others. You're up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.
About the Role
The primary responsibility of this role is for CertiK's security-related services. Intersecting cybersecurity and blockchain, CertiK's security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more.
As a Security Engineer at CertiK, you will contribute to the security offerings of the company, working with the rest of the security team to deliver the best products and services. You might engage directly with CertiK's existing and future clients, participate in expanding security-related products and services, and follow the blockchain world on emerging security problems and trends.
Responsibilities
- Perform end-to-end security services, including consulting, reviewing, auditing, verifying, testing, and delivering detailed security assessments for blockchain systems such as smart contracts, web3 protocols, L1/L2/L3 infrastructures, and dApps.
- Conduct comprehensive manual code reviews to identify vulnerabilities, logical flaws, economic attacks, and non-obvious edge cases across Solidity, Golang, Rust or other blockchain languages.
- Develop and refine threat models and attack surfaces, covering economic, technical, operational, and trust-assumption risks for blockchain protocols.
- Design and execute security tests, including property-based testing and gas-related analysis.
Requirements
- Bachelor's degree in Security, Computer Science, Mathematics, Physics, or Engineering.
- The ability to efficiently triage and juggle multiple priorities and deadlines.
- Specialist-level knowledge of cybersecurity and security auditing; able to write and deploy smart contracts/blockchain infrastructure and write tests with frameworks.
- Familiar with classic attack vectors and vulnerabilities such as reentrancy, sandwich attacks, overflow/underflow.
- The ability to effectively communicate with clients and the internal team, both verbally in English and in writing, about security services and requirements.
- Preferred: Prior hands-on security auditing experience.
What We Offer
- Opportunity to shape the national conversation on blockchain and security.
- Collaborate with industry-leading security researchers, technologists, and global institutions.
- Flexible work environment and mission-driven culture.
Compensation & Benefits
Target annual compensation for this role performed in the US is $120,000 – $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
- Medical, vision, and dental insurance.
- 401(k) plan with company matching.
- Life and accidental death and dismemberment insurance.
- HSA (with high deductible plan) and FSA.
- Flexible paid time off and holidays.
About the Company
View details
CertiK, the largest Web3 security service provider, uses AI and formal verification to protect and monitor smart contracts and protocols, securing the Web3 ecosystem.
Blockchain Security Expert - Security Audit Track
Domains
About the Company
CertiK leads blockchain security by securing smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world's top blockchain projects.
About You
You're a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You're comfortable with the unknown and understand that startup life means wearing multiple hats. You're accountable and obsessed with improvement, both in yourself and in others. You're up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.
About the Role
The primary responsibility of this role is for CertiK's security-related services. Intersecting cybersecurity and blockchain, CertiK's security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more.
As a Security Engineer at CertiK, you will contribute to the security offerings of the company, working with the rest of the security team to deliver the best products and services. You might engage directly with CertiK's existing and future clients, participate in expanding security-related products and services, and follow the blockchain world on emerging security problems and trends.
Responsibilities
- Perform end-to-end security services, including consulting, reviewing, auditing, verifying, testing, and delivering detailed security assessments for blockchain systems such as smart contracts, web3 protocols, L1/L2/L3 infrastructures, and dApps.
- Conduct comprehensive manual code reviews to identify vulnerabilities, logical flaws, economic attacks, and non-obvious edge cases across Solidity, Golang, Rust or other blockchain languages.
- Develop and refine threat models and attack surfaces, covering economic, technical, operational, and trust-assumption risks for blockchain protocols.
- Design and execute security tests, including property-based testing and gas-related analysis.
Requirements
- Bachelor's degree in Security, Computer Science, Mathematics, Physics, or Engineering.
- The ability to efficiently triage and juggle multiple priorities and deadlines.
- Specialist-level knowledge of cybersecurity and security auditing; able to write and deploy smart contracts/blockchain infrastructure and write tests with frameworks.
- Familiar with classic attack vectors and vulnerabilities such as reentrancy, sandwich attacks, overflow/underflow.
- The ability to effectively communicate with clients and the internal team, both verbally in English and in writing, about security services and requirements.
- Preferred: Prior hands-on security auditing experience.
What We Offer
- Opportunity to shape the national conversation on blockchain and security.
- Collaborate with industry-leading security researchers, technologists, and global institutions.
- Flexible work environment and mission-driven culture.
Compensation & Benefits
Target annual compensation for this role performed in the US is $120,000 – $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
- Medical, vision, and dental insurance.
- 401(k) plan with company matching.
- Life and accidental death and dismemberment insurance.
- HSA (with high deductible plan) and FSA.
- Flexible paid time off and holidays.