About the Role:
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for Solidity, a deep understanding of the Ethereum Virtual Machine (EVM), distributed computing, and security.
You should have an eye for detail and have a passion for combining their skills with a flair for creativity and insight to hack smart contracts. This is a fun and challenging full-time position. You need to be able to put yourself in the mind’s eye of a project’s creator, and capable of putting yourself in the minds of various adversarial or free-riding actors.
If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of smart contracts across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.
Responsibilities:
- Work directly with the external blockchain developers to audit their code and secure their products including smart contracts, protocols and dapp.
- Contribute to our internal security tools and create new ones that helps for improving the security services by following good engineering practices.
- Conduct security research and publish your findings in technical blog posts / conferences.
- Improve our processes and offering and strive for the satisfaction of our clients.
Requirements:
- Bachelor's, Master's, or Ph. D. degree in Computer Science, Security Engineering, Mathematics, Physics, or a related field.
- Minimum of 1+ years of professional experience in Solidity, Ethereum Virtual Machine (EVM), and/or blockchain technology within the last 2 years.
- Proficiency in programming languages such as Solidity, Rust, Golang, FunC/Tact, or C/C++.
- Solid experience in threat analysis and advanced persistent threat (APT) response.
- Experience in threat and vulnerability management, penetration testing, and SecOps (intrusion detection, security logging, malware analysis, and forensics) is a plus.
- A strong background in mathematics is a plus.
- Passion for cryptocurrency, DeFi, and blockchain technologies is a plus.
