Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.
Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About You You are a hands-on compliance professional who understands how regulatory frameworks and licensing applications work from initial scoping through final submission readiness. You can turn complex regulations into clear guidance and client deliverables, manage both structured audit requests and fast-changing BD needs, and know when an issue requires escalation to senior Compliance or Legal.
About the Role You will be the first-line compliance owner for AI outputs and related client deliverables. You will support stakeholder groups including client-facing teams and commercial services. You will turn the raw AI output into accurate and usable deliverables, and work as/with Engineering to convert recurring compliance work into reusable workflows and knowledge assets.
\n
Responsibilities
Analyze and decompose regulatory frameworks and licensing requirements.
Support licensing and regulatory-readiness projects, including scoping, applicability analysis, gap assessment, evidence requests, policy review, application preparation, and remediation tracking.
Conduct first-line review of AI outputs for regulatory accuracy, evidence support, source traceability, and client suitability.
Convert unstructured requests into clear scopes and deliverables, including compliance analyses, and review reports.
Support compliance guidance, evidence checklists, submission-material mapping, and licensing deliverables.
Work as/with Engineering to build regulatory mappings, templates, review rules, evaluation cases, and structured AI workflows.
Escalate high-risk regulatory interpretations and final legal or compliance conclusions to senior reviewers or Legal.
Requirements
3 or more years of Engineering experience in compliance, regulatory consulting, digital assets, fintech, financial services, compliance audit, or a law firm.
Hands-on experience with at least 1 licensing application, regulatory registration, or end-to-end regulatory-readiness project.
Strong understanding of regulatory analysis, evidence review, and licensing documentation.
Ability to produce clear guidance, mappings, presentations, and client reports.
Strong client communication and cross-functional project-management skills.
Ability to manage urgent and ambiguous requests from client-facing team while maintaining quality.
Strong written and spoken English; professional Chinese proficiency is preferred but not required.
Familiarity with digital-asset regulation, VASP licensing or similar frameworks is preferred.
Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review.
\n
This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.
Listed by CertiK for a position based in the United States. Employers on this board attest they are hiring domestically.
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.
Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About You You are a detail-oriented self-starter with a strong interest in regulatory compliance, digital assets, and AI. You are comfortable researching unfamiliar regulatory topics, organizing complex information, and producing clear first drafts. You are eager to learn how licensing applications and compliance reviews work in practice and can support both structured audit requests and fast-changing client-facing needs.
About the Role You will support the Engineering team in regulatory research, licensing analysis, AI output review, and client-deliverable preparation. You will work with client-facing teams, compliance reviewers, and Engineering to organize regulatory knowledge, prepare initial drafts, and convert recurring compliance work into reusable mappings, templates, and workflows. All material regulatory conclusions and client deliverables will be reviewed by an experienced compliance professional.
\n
Responsibilities
Research and summarize regulatory frameworks and licensing requirements.
Support licensing and regulatory-readiness projects, including applicability research, gap analysis, evidence requests, policy review, and application-document preparation.
Organize regulatory requirements into structured modules, evidence categories, checklists, and mappings.
Review AI outputs for factual consistency, source traceability, missing information, and formatting issues.
Prepare initial drafts of compliance analyses, evidence guidance, client reports, pitch-deck content, and review materials.
Support the maintenance of regulation-to-service mappings, evidence checklists, and submission-material reuse mappings.
Organize customer-provided materials and identify potential evidence gaps for reviewer confirmation.
Record reviewer feedback and update templates, evaluation cases, and compliance knowledge assets.
Support coordination and request tracking across client-facing teams, compliance reviewers, and Engineering.
Escalate unclear regulatory interpretations and unsupported conclusions to experienced reviewers.
Requirements
Current enrollment in or recent graduation from a program in law, finance, accounting, risk management, public policy, business, computer science, or a related field.
Strong research, analytical, and structured-writing skills.
Strong attention to detail, particularly when reviewing regulatory sources, citations, and customer materials.
Ability to organize complex information into clear checklists, summaries, presentations, and reports.
Ability to manage multiple assignments and meet deadlines.
Strong written and spoken English; professional Chinese proficiency is preferred but not required.
Interest in digital-asset regulation, financial compliance, licensing, or AI-assisted compliance workflows.
Familiarity with digital-asset regulation, VASP licensing, or similar regulatory frameworks is preferred.
Previous internship, coursework, or project experience in compliance, law, audit, fintech, digital assets, or regulatory research is preferred.
Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review is preferred.
\n
This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.
Listed by CertiK for a position based in the United States. Employers on this board attest they are hiring domestically.
Senior Security Engineer
New York, New YorkSecurity Engineering /Full-Time /On-Site
APPLY FOR THIS JOB
About the Company
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.
Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.
Responsibilities
Work with external blockchain developers to audit codes & secure products (smart contracts, protocols & apps/Dapps).
Establish/enforce security policies, manage security vulnerabilities, respond to incidents/exploits & write analysis reports.
Monitor security breaches, defend systems from cyberattacks & provide technical consulting services in cybersecurity.
Conduct penetration tests on web/mobile (Android & iOS) & client application, perform external/internal network security assessment.
Review source code/security design, conduct threat modeling & provide guidance to software development teams.
Contribute to internal security tools & create new ones for improving security services with best engineering practices.
Use static/dynamic analyses to identify flaws or vulnerabilities in smart contracts & propose recommendations.
Assess sandbox/VM/network/core distributed-system code, identify vulnerabilities & build PoC exploits.
Conduct security research, publish findings in technical blog posts & speak at conferences/tech talks/X Spaces, showcasing technical expertise/insights.
Requirements
Master’s degree in Security Informatics/Cybersecurity or a related field.
In-depth knowledge of solidity/smart contract security/Cryptography/Blockchain technology.
Technical expertise in Web3 security, threat/vulnerability management, penetration testing & security review for programs written in Java/JavaScript/Python/C/C++/PHP/Go.
Familiar with cloud platforms such as AWS/Azure/GCP & proficient in Python/JavaScript.
Target annual salary compensation for this role performed is $130,000 to $163,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
APPLY FOR THIS JOB
CertiK Home Page
Jobs powered by
Listed by CertiK for a position based in the United States. Employers on this board attest they are hiring domestically.
Senior Data Scientist
New York, New YorkData /Full-Time /On-Site
APPLY FOR THIS JOB
About the Company
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.
Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About the Role
The primary responsibility of this role is to build/maintain ETL pipelines & process large datasets from APIs/databases/third-party platforms to enable real-time team analytics and automate data preprocessing (cleaning/normalization/validation) for client accounts using rule-based logic/statistical checks to ensure data quality & prepare analysis-ready datasets for modeling/reporting.
Responsibilities
Analyze large-scale blockchain/transactional/social-media datasets to identify patterns/trends/anomalies/risk indicators.
Develop/apply machine learning models (graph-based algorithms & NLP techniques) for threat detection/behavioral analysis/monitoring.
Perform feature engineering/model training/testing/validation to ensure accuracy/robustness/interpretability.
Design/implement scalable data pipelines/ETL processes & CI/CD workflows for ingestion/preprocessing/aggregating blockchain & social media data.
Create dashboards/visualizations to deliver actionable insights & provide data-driven guidance for strategic planning.
Collaborate with engineering/product/business teams to translate analytical requirements into scalable data-science solutions.
Requirements
Master’s degree in Data Science, Statistics, or a related field.
Sound knowledge of feature engineering/model evaluation/validation & on-chain patterns/risk-analysis/threat-detection methodologies.
In-depth understanding of blockchain/distributed ledger data structures & analytics.
Strong ability to apply machine-learning & statistical modeling techniques to large-scale datasets.
Expertise in analyzing graph/text-based or transactional data.
Familiar with cloud platforms (AWS/Azure/GCP) & Spark-based distributed-computing systems (e.g., Databricks).
Proficient in Python, SQL (PostgreSQL/MySQL/NoSQL) & ETL tools (Apache Airflow).
Target annual salary compensation for this role performed is $110,000 to $125,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
APPLY FOR THIS JOB
CertiK Home Page
Jobs powered by
Listed by CertiK for a position based in the United States. Employers on this board attest they are hiring domestically.
Senior Security Engineer
New York, New YorkSecurity Engineering /Full-Time /On-Site
APPLY FOR THIS JOB
About the Company
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.
Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.
Responsibilities
Lead design/deployment of enterprise-grade security solutions to safeguard internal networks/applications/infrastructure, ensuring confidentiality/integrity/availability of mission-critical systems & data
Define/enforce organization-wide security policies/standards; own end-to-end vulnerability management lifecycle & lead cross-functional incident response with engineering/IT/compliance teams
Oversee real-time threat detection/response operations; conduct forensic investigations & drive root cause analysis for high-impact security incidents to inform long-term defense strategies
Manage/execute comprehensive security assessments across internal/third-party systems, including architecture reviews/endpoint security evaluations/infrastructure hardening initiatives
Guide secure development practices by applying advanced static/dynamic analysis to identify vulnerabilities & deliver remediation guidance to engineering teams
Conduct threat modeling/risk analysis for high-value systems to proactively identify/mitigate attack vectors & influence system/product architecture
Architect/maintain internal security tooling to expand detection coverage, streamline response workflows & enhance operational visibility
Requirements
Master’s degree in Computer Science, Software Engineering, Security Informatics, or related field.
Expertise in threat modeling/architectural risk assessment using structured methodologies (e.g., STRIDE/DREAD)
Advanced knowledge of SSDLC, including static/dynamic analysis/QA practices & end-to-end vulnerability lifecycle management (tracking/remediation coordination/verification)
Strong ability to conduct comprehensive security assessments across network infrastructure/application architecture/system configurations
Familiarity with cloud environments (AWS/Azure/GCP) & CI/CD deployment workflows; Proficiency in Java/Python with applied skills in secure coding/debugging/symbolic execution & internal tooling/automation scripting
Target annual salary compensation for this role performed is $130,000 to $160,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
APPLY FOR THIS JOB
CertiK Home Page
Jobs powered by
Listed by CertiK for a position based in the United States. Employers on this board attest they are hiring domestically.
One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 4,798 clients, secured over $597 billion worth of digital assets, and has monitored over 17,000 projects. Our clients include leading projects such as Aave, Polygon, Yearn, and Chiliz.
Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.
About the Role
We are seeking an experienced Solidity Compiler Frontend Engineer to join our team working on cutting-edge blockchain compiler infrastructure and formal verification tools. You will participate in developing and optimizing the frontend components of Solidity compilation pipelines, with a focus on static analysis, type checking, and integration with formal verification systems.
\n
Responsibilities
Design and implement frontend components for the Solidity compiler, including lexical analysis, parsing, AST generation, and semantic analysis.
Optimize compiler performance and improve error reporting and diagnostics.
Develop integration layers between the Solidity compiler and formal verification tools.
Contribute to the evolution of Solidity language features and specification.
Collaborate with security researchers to implement static analysis and security checks.
Maintain and improve existing compiler infrastructure and tooling.
Requirements
3+ years of professional experience in Solidity compiler development or related compiler projects (e.g., EVM-based languages, smart contract compilers)
Strong proficiency in Java with deep understanding of Java based compiler development and optimization
Solid foundation in compiler theory, including parsing techniques, type systems, and intermediate representations
Experience with formal methods or formal verification tools (e.g., SMT solvers, theorem provers, or verification frameworks)
Strong understanding of the Ethereum Virtual Machine (EVM) and smart contract execution models
Excellent problem-solving skills and attention to detail
Preferred Qualifications
Experience with LLVM or similar compiler infrastructure
Knowledge of programming language semantics and type theory
Contributions to open-source compiler projects
Experience with Solidity or other blockchain programming languages
What We Offer
Opportunity to shape the national conversation on blockchain and security.
Collaborate with industry-leading security researchers, technologists, and global institutions.
Flexible work environment and mission-driven culture.
\n
Compensation: If the role is performed in the US, the target annual compensation is $140,000 - $220,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
Blockchain technology is enabling a rapidly-growing era of innovation for the digital world. It is crucial that blockchain code such as protocols and smart contracts are provably secure and correct. Once deployed, they are public and cannot be changed. Vulnerabilities and bugs in such programs regularly put millions of dollars at stake. This is where CertiK comes in. We are the leading blockchain security company. Our goal is to secure the cyber world by applying cutting edge techniques from academia to secure blockchain code. Come and join this ambitious mission as a research software engineer to work on automated analyses for provably secure and correct blockchain applications!
What you will do
You will design and develop tools that automatically ensure the correctness of smart contracts or identify security issues and bugs in smart contracts. We have software engineer positions available at all levels of seniority. Title and responsibilities will be commensurate with experience and background.
As part of our multinational team of programming language experts, you will participate in the development of tools that rest upon techniques such as symbolic model checking, SAT/SMT solving, abstract interpretation, data flow analysis, and deductive verification. You will have the opportunity to work on all stages of tool development from idea generation to implementation and iterative improvements. Our team is highly supportive and collaborative with great opportunities to learn and grow.
About you
You have a background in programming language theory and automated reasoning and love to work on the forefront of applying results from theoretical computer science. You love to tackle computationally hard problems and have a proven track record of achieving results, where results are people using your tool to do their jobs. You are collaborative: you share ideas, love to brainstorm with peers, and give and receive feedback. You are comfortable with the unknown and understand that #startuplife means that you will be wearing multiple hats.
\n
Responsibilities
Extend the scope and depth of our automated program verification tools and brainstorm, design, and implement new tools.
Adapt and improve algorithms for symbolic software model checking. Examples include bounded model checking (BMC), counterexample-guided abstraction refinement (CEGAR), and property directed reachability (IC3/PDR).
Build and extend translators from different input languages into intermediate representations, optimizing the generated models for automated analysis.
Identify new classes of security properties of smart contracts and formalize properties for use in our automated verification tools.
Closely collaborate with other software engineers in developing tools and set technical direction for solving problems in consultation with your team and management.
Work on all aspects of delivering working software that meets customer needs, including analysis, design, automated testing, operations, CI/CD, measuring results, incorporating customer feedback, and support.
Required Qualifications
Master's Degree in Computer Science or a related field or 5 years of equivalent experience.
Minimum of 4 years of software development experience (includes internships, software developed during research, and open-source development).
Minimum of 2 years of experience with one or more of the following: model checking, formal verification, SAT/SMT solving (Z3, CVC4, Yices, MathSAT, SMTInterpol), abstract interpretation, or closely related disciplines.
Demonstrated knowledge of fundamental computer science concepts such as data structures, algorithms, mathematical logic, and automata theory.
Preferred Qualifications
PhD in the broader field of automated reasoning.
Publication record in conferences like POPL, CAV, TACAS, FMCAD, FM, etc.
Experience in functional programming (OCaml or Haskell).
Strong and creative problem-solving skills; always willing to learn and embrace new technologies and to collaborate.
Prior experience in a professional software development environment.
\n
About the Company
Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class technology to secure and monitor blockchain protocols and smart contracts. CertiK’s mission is to secure the cyber world. Starting with blockchain, CertiK applies cutting-edge innovations from academia into enterprise, enabling mission-critical applications to be built with security and correctness.
Compensation
Target annual base salary for this role performed in the US is $115,000 - $230,000.
The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#LI-Remote
#blockchain
#startups
#hiring
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
Sr. Security Engineer (Penetration Testing)
US / RemoteBlockchain Security Engineering – Blockchain Security Engineering /Full-Time /Remote
APPLY FOR THIS JOB
Why Us?
CertiK is a pioneer in blockchain security, leveraging best-in-class AI technology to protect and monitor blockchain protocols and smart contracts. Founded in 2018 by professors from Yale University and Columbia University, CertiK’s mission is to secure the web3 world. CertiK applies cutting-edge innovations from academia to enterprise, enabling mission-critical applications to scale with safety and correctness.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.
Responsibilities
Perform security assessments on web, mobile, thick client applications, and browser extensions
Conduct external and internal network penetration tests
Perform security source code reviews
Perform cloud security reviews
Develop comprehensive pentest reports for both technical and non-technical audiences
Research and develop innovative techniques, tools, and methodologies for pentesting applications in the blockchain space
Contribute to the community by developing tools, presentations, and blog posts
Requirements
Passionate about cryptocurrency, DeFi, and blockchain, with a willingness to learn Web3 technologies such as smart contracts
Minimum of 4 years of experience in application security and penetration testing
Experienced in source code review for different languages, with a strong understanding of JavaScript and TypeScript
Experienced in mobile application penetration testing
Familiar with cloud platforms and their security risks, such as AWS, Azure, and GCP
Experience in programming with scripting languages such as Python and Bash
Solid understanding of cryptography
BS/MS/PhD in Computer Science or Information Security
Strong spoken and written communication skills
Bonus Points
Experienced in pentesting Web3 applications such as crypto exchanges, wallets, Dapps, and key custodian solutions
Experienced in smart contract security audits
Familiar with browser extension architecture and security risks
Actively participate in the blockchain security community
OSCP, OSWE, OSCE, GWAPT, or comparable certification
Participated in bug bounty programs and audit contests
Published security-related blog posts and spoken at security conferences and/or local meetups
About the Company
One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured over $310 billion worth of digital assets, and has detected over 60,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Terra, Yearn, and Chiliz.
Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Coinbase Ventures, Binance, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.
Compensation
Target annual base salary for this role performed in the US is $100,000 - $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#LI-Remote
#blockchain
#startups
#hiring
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
APPLY FOR THIS JOB
CertiK Home Page
Jobs powered by
Listed by CertiK for a position based in the United States. Employers on this board attest they are hiring domestically.