Blockchain Security Researcher

Accountabilities:

• Conduct comprehensive security audits of smart contracts used by decentralized applications, blockchain infrastructure, and financial institutions, identifying vulnerabilities, assessing their severity, and presenting actionable findings to clients.
• Lead security audits independently from planning through final reporting, using AI as a core research collaborator and partnering with other researchers when additional technical perspectives are valuable.
• Participate in protocol design reviews and applied research engagements, evaluating system architecture, trust assumptions, threat models, and operational constraints before implementation begins.
• Collaborate with client engineering teams to analyze, design, specify, and improve smart contract mechanisms and security-critical protocol components.
• Integrate AI tools throughout the audit lifecycle to improve coverage, accelerate complex reasoning, and enhance the quality and efficiency of research deliverables.
• Develop and maintain reusable security tooling, including AI agents, prompts, scripts, and automated workflows that can be adopted and extended by the wider research team.
• Investigate emerging blockchain technologies, vulnerability classes, exploit techniques, and attack vectors to identify risks in evolving onchain systems.
• Document research findings, communicate technical risks clearly to clients, and contribute insights to internal security knowledge bases and the broader blockchain ecosystem.
• Continuously refine audit methodologies and research practices to address new threats and improve smart contract security standards.

Requirements:

• Practical experience in one or more relevant technical fields, including software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics, game theory, or decentralized finance mechanisms.
• Hands-on experience designing and developing smart contracts, beyond reviewing or auditing existing implementations.
• Strong working knowledge of Solidity and the Ethereum Virtual Machine (EVM) ecosystem, including common libraries, development frameworks, smart contract patterns, and protocol architectures.
• Regular, effective use of modern AI tools to improve security audits, reason about complex systems, expand vulnerability coverage, and produce high-quality technical outputs.
• Ability to critically evaluate AI-generated code and findings, identify potential inaccuracies, and apply sound security judgment rather than relying on automated outputs without verification.
• Experience building or extending technical tools and workflows, such as custom scripts, prompts, AI agents, and reusable automation that can benefit a wider engineering or research team.
• Advanced English proficiency, with strong written and verbal communication skills for presenting findings, explaining vulnerabilities, and collaborating with technical stakeholders.

Nice to Have:

• Experience with non-EVM blockchain ecosystems and programming languages, such as Canton, Move for Sui or Aptos, Go for the Cosmos SDK, Cairo for Starknet, Rust-based blockchains such as Solana or Stellar, or zero-knowledge circuits and cryptography-intensive systems.
• Experience in crypto risk assessment, smart contract threat modeling, or evaluating the security of decentralized financial protocols.
• Experience collaborating directly with protocol teams on co-creative engagements, helping design, specify, and implement secure smart contracts.
• Background in Web2 security, including penetration testing, web application security, infrastructure security, or application security.
• Familiarity with formal verification, invariant testing, and advanced fuzzing tools such as Echidna, Foundry, Halmos, or Certora.
• Demonstrated participation in smart contract audit contests, such as Code4rena, Sherlock, or Cantina, or bug bounty platforms such as Immunefi or HackerOne.
• A portfolio of public security research, including published vulnerability findings, technical articles, conference presentations, or contributions to open-source security tools.

Benefits:

• Fully remote work with flexibility to work from anywhere, subject to applicable employment arrangements.
• Flexible time off to support personal well-being and work-life balance.
• Opportunities to meet teammates through company gatherings held around the world.
• Eight weeks of paid leave for primary caregivers and four weeks for secondary caregivers.
• A one-time baby bonus of $3,600.
• Up to $500 in equipment support to help build a home office.
• Medical insurance coverage.
• Learning and professional development opportunities.
• A monthly stipend for a preferred coworking space.
• A collaborative environment focused on advanced blockchain security research, AI-powered tooling, and continuous technical growth.
• A structured interview process consisting of a 30-minute recruiter call, a 60-minute manager interview, a 60-minute technical interview, a paid code review work trial, and reference checks.