Senior Security Engineer

Responsibilities

• Audit smart contracts, protocols, and decentralized applications (Dapps) for external blockchain developers
• Establish security policies, manage vulnerabilities, and respond to incidents or exploits
• Conduct penetration tests on web, mobile (Android & iOS), and client applications
• Perform external and internal network security assessments
• Review source code and security designs while conducting threat modeling
• Use static and dynamic analyses to identify flaws in smart contracts and propose recommendations
• Build Proof of Concept (PoC) exploits for vulnerabilities found in distributed systems
• Conduct security research and publish findings through technical blog posts and conference presentations

Requirements

• Master's degree in Security Informatics, Cybersecurity, or a related field
• In-depth knowledge of Solidity, smart contract security, cryptography, and blockchain technology
• Technical expertise in Web3 security, threat management, and penetration testing
• Proficiency in Python and JavaScript
• Experience with programming languages such as Java, C/C++, PHP, or Go
• Familiarity with cloud platforms including AWS, Azure, or GCP

Benefits

• Medical, vision, and dental insurance
• 401(k) plan with company matching
• Life and accidental death and dismemberment insurance
• HSA (with high deductible plan) and FSA options
• Flexible paid time off and holidays

About the Company

Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications. Headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, and incident response for the global digital asset ecosystem.