Blockchain Security Expert - Security Audit Track
CertiK is a Web3 security platform providing blockchain and smart-contract audits, formal verification, compliance and risk intelligence, monitoring, and validator services.
Maintainer signals as of 9/25/2026
Funding history
Projects
About CertiK
CertiK is a New York-based Web3 security company founded in December 2017 by professors from Yale and Columbia. Its current offerings include smart-contract and blockchain audits, formal verification, penetration testing, DLT security, KYC and regulatory compliance services, SkyInsights risk analytics, Skynet security intelligence, validator operations, AI Auditor, CertiK Hunt, and Skylens.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will perform end-to-end security services for blockchain systems, focusing on audits, reviews, verification, and testing of smart contracts, protocols, and infrastructures. You will conduct manual code reviews across Solidity, Golang, Rust and other blockchain languages, develop threat models and attack surfaces, design and run security tests, and communicate findings to clients and internal teams.
Requirements
- Bachelor's degree in Security, Computer Science, Mathematics, Physics, or Engineering
- Ability to efficiently triage and juggle multiple priorities and deadlines
- Specialist-level knowledge of cybersecurity and security auditing
- Ability to write and deploy smart contracts and blockchain infrastructure and to write tests with testing frameworks
- Familiarity with classic attack vectors and vulnerabilities such as reentrancy, sandwich attacks, overflow and underflow
- Effective verbal and written communication in English with clients and internal teams
- Prior hands-on security auditing experience preferred
Responsibilities
- Perform end-to-end security services including consulting, reviewing, auditing, verifying, testing, and delivering detailed security assessments for blockchain systems
- Audit smart contracts, web3 protocols, L1/L2/L3 infrastructures, and dApps
- Conduct comprehensive manual code reviews to identify vulnerabilities, logical flaws, economic attacks, and non-obvious edge cases
- Develop and refine threat models and attack surfaces covering economic, technical, operational, and trust-assumption risks
- Design and execute security tests including property-based testing and gas-related analysis
- Perform penetration testing and other security tests against blockchain infrastructure
Benefits
- Medical insurance
- Vision insurance
- Dental insurance
- 401(k) plan with company matching
- Life and accidental death and dismemberment insurance
- Health Savings Account with high deductible plan
- Flexible Spending Account
- Flexible paid time off
- Holidays
- Variable commission program for business development sales roles
