About the company
Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain protocols and smart contracts. CertiKās mission is to secure the cyber world. Starting with blockchain, CertiK applies cutting-edge innovations from academia into enterprise, enabling mission-critical applications to be built with security and correctness. CertiK is one of the fastest growing and most trusted companies in blockchain security and has become a true market leader. To date, we have collectively worked with over 1800 enterprise clients, helped secure over $310 billion worth of digital assets, and detected over 31,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Terra, Yearn, and Chiliz. CertiK just raised over $140 million and backed by Coatue, Tiger Global, Sequoia, and Hillhouse Capital.
Job Summary
Responsibilities
šPerform end-to-end security services, including consulting, reviewing, auditing, verifying, testing, and delivering detailed security assessments for blockchain systems such as smart contracts, web3 protocols, L1/L2/L3 infrastructures, and dApps. šConduct comprehensive manual code reviews to identify vulnerabilities, logical flaws, economic attacks, and non-obvious edge cases across Solidity, Golang, Rust or other blockchain languages. šDevelop and refine threat models and attack surfaces, covering economic, technical, operational, and trust-assumption risks for blockchain protocols. šDesign and execute security tests, including property-based testing and gas-related analysis.
Requirements
šBachelor's degree in Security, Computer Science, Mathematics, Physics, and Engineering šThe ability to efficiently triage and juggle multiple priorities and deadlines. šSpecialist-level knowledge of cybersecurity and security auditing. Can write and deploy smart contracts/blockchain infrastructure and write tests with frameworks. šFamiliar with classic attack vectors and vulnerabilities such as reentrancy, sandwich attacks, overflow/underflow šThe ability to effectively communicate with the clients and internal team, both verbally in English and in writing, about security services and requirements. š[Preferred] Prior hands-on security auditing experience.
The future of finance is here ā whether youāre interested in blockchain, cryptocurrency, or remote web3 jobs, thereās a perfect role waiting for you.
