11 months ago
Remote, United StatesSenior
Responsibilities
- Perform end-to-end security services, including consulting, reviewing, auditing, verifying, testing, and delivering security assessments for smart contracts, Web3 protocols, blockchain infrastructure, and dApps.
- Conduct manual code reviews across Solidity, Golang, Rust, and other blockchain languages to identify vulnerabilities, logical flaws, economic attacks, and edge cases.
- Develop threat models and analyze economic, technical, operational, and trust-assumption risks across blockchain protocol attack surfaces.
- Design and execute property-based security tests and gas-related analyses.
- Communicate security services, findings, and requirements with clients and internal teams.
Requirements
- Bachelor's degree in Security, Computer Science, Mathematics, Physics, or Engineering.
- Specialist-level knowledge of cybersecurity and security auditing.
- Ability to write and deploy smart contracts or blockchain infrastructure and write tests using frameworks.
- Familiarity with reentrancy, sandwich attacks, overflow, underflow, and other classic attack vectors.
- Ability to manage multiple priorities and deadlines and communicate effectively in written and spoken English.
- Prior hands-on security auditing experience is preferred.
Benefits
- Flexible work environment and mission-driven culture.
- Medical, vision, and dental insurance for full-time employees.
- 401(k) plan with company matching.
- Life and accidental death and dismemberment insurance.
- Health Savings Account with a high-deductible plan and Flexible Spending Account.
- Flexible paid time off and holidays.
About CertiK
CertiK provides blockchain security products and services for Web3 teams, including smart-contract auditing, formal verification, and continuous on-chain monitoring (Skynet). It monetizes through audits, monitoring subscriptions, and related security engagements for protocols, exchanges, and infrastructure providers. Founded in 2018 and headquartered in New York, the privately held company is known for bringing academic formal methods to production smart contracts.