About the company
Blum is a cutting-edge hybrid exchange tailored for Telegram and mobile platforms. Our team is passionate about technology and dedicated to pushing the boundaries of what's possible in the trading world. We are revolutionizing the way trading is done, providing seamless and secure services to both individual users and businesses. By leveraging the power of Telegram, we offer a unique and accessible approach to trading, catering to a global audience. Launched in April, Blum has gathered over 80 million users and has become one of the top 3 most popular apps on Telegram worldwide. Our experienced team brings years of expertise from leading crypto projects, including Binance, Trust Wallet, Crypto.com, Bitget, and more.
Job Summary
Responsibilities
📍Conduct security research on web applications, including Telegram miniapps, Web3, and mobile applications (black/grey/white box) 📍Analyze the external and internal perimeter of the organization for vulnerable services 📍Perform penetration testing and security research 📍Participate in Purple Team exercises, combining attack and defense activities 📍Investigate cybersecurity incidents, including blockchain-related incidents 📍Conduct OSINT research and analyze open-source data Implement and enhance security measures within the organization 📍Research potential attack vectors on social networks, external services, and user accounts 📍Prepare detailed reports and provide recommendations for vulnerability remediation
Requirements
📍Experience in web application penetration testing 📍Knowledge of attack and defense strategies in Telegram miniapps and Web3 applications 📍Proficiency in OSINT and digital footprint investigations 📍Experience in blockchain incident investigation, transaction analysis, and smart contract vulnerability assessment 📍Understanding of attacks on decentralized exchanges (DEX), bridges, and wallets 📍Proficiency with security tools such as Burp Suite, Metasploit, ZAP, nmap, and custom scripts 📍Basic knowledge of programming and code analysis (Golang, JavaScript) 📍Ability to automate tasks using Python or Bash 📍Experience bypassing anti-fraud systems and analyzing user behavior
The future of finance is here — whether you’re interested in blockchain, cryptocurrency, or remote web3 jobs, there’s a perfect role waiting for you.
