11 months ago
Remote, United StatesSenior
Base Salary
$120k - $180k/yr
Responsibilities
- Conduct in-depth security evaluations of blockchain nodes, validators, consensus mechanisms, mempool behavior, networking layers, and chain modules.
- Review and analyze blockchain frameworks including Cosmos SDK, CometBFT, Geth, Hyperledger, and other L1/L2/L3 infrastructure.
- Identify vulnerabilities involving consensus safety, chain halting, permission models, and block production.
- Implement and run custom scripts and test scenarios for validator and network behavior, chain stress conditions, and edge cases.
- Contribute to security consulting, reviews, audits, smart contract and blockchain verification, penetration testing, and related security services.
- Engage with existing and prospective clients and track emerging blockchain security problems and trends.
Requirements
- Strong written and spoken English communication skills.
- High diligence and attention to detail for multi-step testing and long-running experiments.
- Solid understanding of blockchain architecture and node internals, including Cosmos SDK, CometBFT, Geth, Hyperledger Fabric, and Besu.
- Strong scripting and automation skills with Python or Bash.
- Familiarity with Docker and containerized testing environments.
- Prior manual Web3 security auditing experience is preferred but not required.
Benefits
- Flexible work environment and mission-driven culture.
- Medical, vision, and dental insurance for full-time employees.
- 401(k) plan with company matching.
- Life and accidental death and dismemberment insurance.
- Health Savings Account with a high-deductible plan and Flexible Spending Account.
- Flexible paid time off and holidays.
- Opportunity to collaborate with security researchers, technologists, and global institutions.
About CertiK
CertiK provides blockchain security products and services for Web3 teams, including smart-contract auditing, formal verification, and continuous on-chain monitoring (Skynet). It monetizes through audits, monitoring subscriptions, and related security engagements for protocols, exchanges, and infrastructure providers. Founded in 2018 and headquartered in New York, the privately held company is known for bringing academic formal methods to production smart contracts.