Security Engineer
Skills
About the Role
You will secure smart contracts and blockchain protocols by performing security audits, building automated scanning and monitoring tools, and conducting real-time vulnerability assessments. You will investigate incidents, perform root cause analysis and fund tracing, model threats, and provide technical guidance to improve security processes and tooling.
Requirements
- Bachelor's degree or higher in Computer Science or related field
- Proficient in Solidity
- Proficient in EVM concepts
- Proficient in one or more of Go, Python, or TypeScript
- Basic understanding of common smart contract security vulnerabilities and simulation testing
- Understanding of blockchain and smart contract principles and experience reading blockchain explorers
- Experience creating scripts to track and scan blockchain data
- Understanding of solidity libraries and associated security considerations
- Familiarity with smart contract development testing cycles and transaction analysis
- Ability to identify machine-level, transaction-level, and business logic-level vulnerabilities
- 3+ years of smart contract auditing experience and experience leading audits of complex protocols
Responsibilities
- Conduct security audits and reviews on smart contracts and related protocols
- Summarise audit findings in high-quality reports
- Design and develop automated scanning and monitoring tools for smart contracts
- Use scanning tools to detect vulnerabilities and issue timely risk warnings
- Develop and monitor fast response and incident handling processes
- Perform root cause analysis on hacking incidents, including prevention and correction
- Perform fund tracing and transaction-level investigation
- Analyse newly disclosed vulnerabilities and summarise root causes for early detection
- Develop on-chain security strategies and perform threat modelling of blockchain protocols
- Provide technical guidance to build security frameworks, analysis tools, and products
- Establish and promote security best practices with product and engineering teams
- Coach and mentor Protocol Security team members
- Conduct penetration testing