Blockchain Security Researcher

Accountabilities:: Conduct comprehensive security audits of smart contracts used by decentralized applications, blockchain infrastructure, and financial institutions, identifying vulnerabilities, assessing their severity, and presenting actionable findings to clients. Lead security audits independently from planning through final reporting, using AI as a core research collaborator and partnering with other researchers when additional technical perspectives are valuable. Participate in protocol design reviews and applied research engagements, evaluating system architecture, trust assumptions, threat models, and operational constraints before implementation begins. Collaborate with client engineering teams to analyze, design, specify, and improve smart contract mechanisms and security-critical protocol components. Integrate AI tools throughout the audit lifecycle to improve coverage, accelerate complex reasoning, and enhance the quality and efficiency of research deliverables. Develop and maintain reusable security tooling, including AI agents, prompts, scripts, and automated workflows that can be adopted and extended by the wider research team. Investigate emerging blockchain technologies, vulnerability classes, exploit techniques, and attack vectors to identify risks in evolving onchain systems. Document research findings, communicate technical risks clearly to clients, and contribute insights to internal security knowledge bases and the broader blockchain ecosystem. Continuously refine audit methodologies and research practices to address new threats and improve smart contract security standards. Requirements: Practical experience in one or more relevant technical fields, including software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics, game theory, or decentralized finance mechanisms. Hands-on experience designing and developing smart contracts, beyond reviewing or auditing existing implementations. Strong working knowledge of Solidity and the Ethereum Virtual Machine (EVM) ecosystem, including common libraries, development frameworks, smart contract patterns, and protocol architectures. Regular, effective use of modern AI tools to improve security audits, reason about complex systems, expand vulnerability coverage, and produce high-quality technical outputs. Ability to critically evaluate AI-generated code and findings, identify potential inaccuracies, and apply sound security judgment rather than relying on automated outputs without verification. Experience building or extending technical tools and workflows, such as custom scripts, prompts, AI agents, and reusable automation that can benefit a wider engineering or research team. Advanced English proficiency, with strong written and verbal communication skills for presenting findings, explaining vulnerabilities, and collaborating with technical stakeholders. Nice to Have: Experience with non-EVM blockchain ecosystems and programming languages, such as Canton, Move for Sui or Aptos, Go for the Cosmos SDK, Cairo for Starknet, Rust-based blockchains such as Solana or Stellar, or zero-knowledge circuits and cryptography-intensive systems. Experience in crypto risk assessment, smart contract threat modeling, or evaluating the security of decentralized financial protocols. Experience collaborating directly with protocol teams on co-creative engagements, helping design, specify, and implement secure smart contracts. Background in Web2 security, including penetration testing, web application security, infrastructure security, or application security. Familiarity with formal verification, invariant testing, and advanced fuzzing tools such as Echidna, Foundry, Halmos, or Certora. Demonstrated participation in smart contract audit contests, such as Code4rena, Sherlock, or Cantina, or bug bounty platforms such as Immunefi or HackerOne. A portfolio of public security research, including published vulnerability findings, technical articles, conference presentations, or contributions to open-source security tools. Benefits: Fully remote work with flexibility to work from anywhere, subject to applicable employment arrangements. Flexible time off to support personal well-being and work-life balance. Opportunities to meet teammates through company gatherings held around the world. Eight weeks of paid leave for primary caregivers and four weeks for secondary caregivers. A one-time baby bonus of $3,600. Up to $500 in equipment support to help build a home office. Medical insurance coverage. Learning and professional development opportunities. A monthly stipend for a preferred coworking space. A collaborative environment focused on advanced blockchain security research, AI-powered tooling, and continuous technical growth. A structured interview process consisting of a 30-minute recruiter call, a 60-minute manager interview, a 60-minute technical interview, a paid code review work trial, and reference checks.