Blockchain Security Researcher

<h3>Accountabilities:</h3><ul>
<li>Conduct comprehensive security audits of smart contracts used by decentralized applications, blockchain infrastructure, and financial institutions, identifying vulnerabilities, assessing their severity, and presenting actionable findings to clients.</li>
<li>Lead security audits independently from planning through final reporting, using AI as a core research collaborator and partnering with other researchers when additional technical perspectives are valuable.</li>
<li>Participate in protocol design reviews and applied research engagements, evaluating system architecture, trust assumptions, threat models, and operational constraints before implementation begins.</li>
<li>Collaborate with client engineering teams to analyze, design, specify, and improve smart contract mechanisms and security-critical protocol components.</li>
<li>Integrate AI tools throughout the audit lifecycle to improve coverage, accelerate complex reasoning, and enhance the quality and efficiency of research deliverables.</li>
<li>Develop and maintain reusable security tooling, including AI agents, prompts, scripts, and automated workflows that can be adopted and extended by the wider research team.</li>
<li>Investigate emerging blockchain technologies, vulnerability classes, exploit techniques, and attack vectors to identify risks in evolving onchain systems.</li>
<li>Document research findings, communicate technical risks clearly to clients, and contribute insights to internal security knowledge bases and the broader blockchain ecosystem.</li>
<li>Continuously refine audit methodologies and research practices to address new threats and improve smart contract security standards.</li>
<h2>Requirements:</h2>
<ul>
<li>Practical experience in one or more relevant technical fields, including software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics, game theory, or decentralized finance mechanisms.</li>
<li>Hands-on experience designing and developing smart contracts, beyond reviewing or auditing existing implementations.</li>
<li>Strong working knowledge of Solidity and the Ethereum Virtual Machine (EVM) ecosystem, including common libraries, development frameworks, smart contract patterns, and protocol architectures.</li>
<li>Regular, effective use of modern AI tools to improve security audits, reason about complex systems, expand vulnerability coverage, and produce high-quality technical outputs.</li>
<li>Ability to critically evaluate AI-generated code and findings, identify potential inaccuracies, and apply sound security judgment rather than relying on automated outputs without verification.</li>
<li>Experience building or extending technical tools and workflows, such as custom scripts, prompts, AI agents, and reusable automation that can benefit a wider engineering or research team.</li>
<li>Advanced English proficiency, with strong written and verbal communication skills for presenting findings, explaining vulnerabilities, and collaborating with technical stakeholders.</li>
<h2>Nice to Have:</h2>
<ul>
<li>Experience with non-EVM blockchain ecosystems and programming languages, such as Canton, Move for Sui or Aptos, Go for the Cosmos SDK, Cairo for Starknet, Rust-based blockchains such as Solana or Stellar, or zero-knowledge circuits and cryptography-intensive systems.</li>
<li>Experience in crypto risk assessment, smart contract threat modeling, or evaluating the security of decentralized financial protocols.</li>
<li>Experience collaborating directly with protocol teams on co-creative engagements, helping design, specify, and implement secure smart contracts.</li>
<li>Background in Web2 security, including penetration testing, web application security, infrastructure security, or application security.</li>
<li>Familiarity with formal verification, invariant testing, and advanced fuzzing tools such as Echidna, Foundry, Halmos, or Certora.</li>
<li>Demonstrated participation in smart contract audit contests, such as Code4rena, Sherlock, or Cantina, or bug bounty platforms such as Immunefi or HackerOne.</li>
<li>A portfolio of public security research, including published vulnerability findings, technical articles, conference presentations, or contributions to open-source security tools.</li>
<h2>Benefits:</h2>
<ul>
<li>Fully remote work with flexibility to work from anywhere, subject to applicable employment arrangements.</li>
<li>Flexible time off to support personal well-being and work-life balance.</li>
<li>Opportunities to meet teammates through company gatherings held around the world.</li>
<li>Eight weeks of paid leave for primary caregivers and four weeks for secondary caregivers.</li>
<li>A one-time baby bonus of $3,600.</li>
<li>Up to $500 in equipment support to help build a home office.</li>
<li>Medical insurance coverage.</li>
<li>Learning and professional development opportunities.</li>
<li>A monthly stipend for a preferred coworking space.</li>
<li>A collaborative environment focused on advanced blockchain security research, AI-powered tooling, and continuous technical growth.</li>
<li>A structured interview process consisting of a 30-minute recruiter call, a 60-minute manager interview, a 60-minute technical interview, a paid code review work trial, and reference checks.</li>
</ul>
</ul>
</ul>
</ul>