Security Engineer, CertiK
Penetration Testing
$100-140k
Blockchain cybersecurity company
Open for applications
Blockchain cybersecurity company
201-500 employees
Open for applications
$100-140k
201-500 employees
Company mission
CertiK's mission is to secure the Web3 world.
Role
Who you are
- Passionate about cryptocurrency, DeFi, and blockchain, with a willingness to learn Web3 technologies such as smart contracts
- Minimum of 4 years of experience in application security and penetration testing
- Experienced in source code review for different languages, with a strong understanding of JavaScript and TypeScript
- Experienced in mobile application penetration testing
- Familiar with cloud platforms and their security risks, such as AWS, Azure, and GCP
- Experience in programming with scripting languages such as Python and Bash
- Solid understanding of cryptography
- BS/MS/PhD in Computer Science or Information Security
- Strong spoken and written communication skills
Desirable
- Experienced in pentesting Web3 applications such as crypto exchanges, wallets, Dapps, and key custodian solutions
- Experienced in smart contract security audits
- Familiar with browser extension architecture and security risks
- Actively participate in the blockchain security community
- OSCP, OSWE, OSCE, GWAPT, or comparable certification
- Participated in bug bounty programs and audit contests
- Published security-related blog posts and spoken at security conferences and/or local meetups
What the job involves
- The primary responsibility of this role is for CertiK’s security-related services
- Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more
- We are looking to hire someone with a passion for application security and penetration testing
- This is a fun and challenging full-time position
- If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role
- While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security
- Perform security assessments on web, mobile, thick client applications, and browser extensions
- Conduct external and internal network penetration tests
- Perform security source code reviews
- Perform cloud security reviews
- Develop comprehensive pentest reports for both technical and non-technical audiences
- Research and develop innovative techniques, tools, and methodologies for pentesting applications in the blockchain space
- Contribute to the community by developing tools, presentations, and blog posts
Our take
CertiK is a blockchain security company providing real-time insights into security issues within the cryptocurrency sector. CertiK has audited 3,500+ Web3 projects, and its reports are used to protect over $350 billion in market capital in total.
With a rise in financial crime linked to complex new decentralised finance products and the fallout from the collapse of FTX, 2022 was a turbulent year for Web3, with $3.9 billion lost to hacking and fraud. CertiK are making the most of the growing appetite for security by launching a string of new initiatives, including their CertiKShield product offering community-based insurance for crypto-asset holders.
Its lead investors include NEO Global Capital (NGC), a dedicated blockchain investor, and Binance Labs, a spin-off branch of Binance, the world's largest cryptocurrency. With global crypto markets beginning to recover from a difficult year and security becoming a major priority for most Web3 firms, CertiK will certainly have an outsized role to play in the future of the decentralised internet.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Work from home opportunities
Company values
- Excellence
- Trustworthy
- Curiosity
- Flexibility
Articles
Leadership
Ronghui Gu
(CEO)Earned a PhD in Computer Science from Yale University. Previously Software Engineer at Google for 1 year.
Zhong Shao
(Co-founder)Worked for 27 years in the Computer Science Department at Yale University, holding various positions such as Associate Professor, Department Chair and Professor.
Share this job
View 4 more jobs at CertiK