Senior Security Engineer (Penetration Testing)
CertiK is a Web3 security platform providing blockchain and smart-contract audits, formal verification, compliance and risk intelligence, monitoring, and validator services.
Maintainer signals as of 9/25/2026
Funding history
Projects
About CertiK
CertiK is a New York-based Web3 security company founded in December 2017 by professors from Yale and Columbia. Its current offerings include smart-contract and blockchain audits, formal verification, penetration testing, DLT security, KYC and regulatory compliance services, SkyInsights risk analytics, Skynet security intelligence, validator operations, AI Auditor, CertiK Hunt, and Skylens.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
Perform penetration tests and application security assessments across web, mobile, desktop, and browser extension platforms; conduct network tests, source code reviews, cloud security assessments, and Web3 application analysis; produce clear reports; and develop new testing techniques and tools.
Requirements
- Passion for cryptocurrency, DeFi, and blockchain with willingness to learn Web3 technologies such as smart contracts
- Minimum of 4 years of experience in application security and penetration testing
- Experience in source code review for multiple languages with strong understanding of JavaScript and TypeScript
- Experience in mobile application penetration testing
- Familiarity with AWS, Azure, and GCP security risks
- Experience with scripting languages such as Python and Bash
- Solid understanding of cryptography
- BS, MS, or PhD in Computer Science or Information Security
- Strong spoken and written communication skills
Responsibilities
- Perform security assessments on web, mobile, thick client applications, and browser extensions
- Conduct external and internal network penetration tests
- Perform security source code reviews
- Perform cloud security reviews
- Develop comprehensive pentest reports for technical and non-technical audiences
- Research and develop pentesting techniques, tools, and methodologies for blockchain applications
- Contribute to the community by developing tools, presentations, and blog posts
Benefits
- Medical insurance
- Vision insurance
- Dental insurance
- 401(k) plan with company matching
- Life and accidental death and dismemberment insurance
- HSA with high deductible plan
- FSA
- Flexible paid time off and holidays
- Variable commission program for business development sales roles