(Solana) Offensive Security Engineer - 100% Remote, Blockchain, DeFi

Halborn; Poland; Remote; PLN 297,000 - 383,000; Full time

Job summary

A leading cybersecurity firm is seeking an Offensive Security Engineer to conduct adversary simulations and research security techniques in the cryptocurrency space. The role emphasizes 5+ years of offensive security experience and familiarity with smart contracts and DeFi protocols. It offers a remote work setup for candidates passionate about the crypto industry.

Qualifications

• 5+ years of offensive security experience required.
• 2+ years auditing DeFi protocols preferred.
• Mastery of web application languages essential.

Responsibilities

• Conduct adversary simulations and reporting.
• Research offensive security techniques.
• Develop tools and exploits.

Skills

Passion for the cryptocurrency industry

Experience in smart contract audits

Offensive security experience

Experience auditing DeFi protocols

Proficiency in scripting languages

Knowledge of penetration testing tools

Proficiency with operating systems

Critical thinking

Technical report writing

Tools

BurpSuite

Metasploit

Job description

(Solana) Offensive Security Engineer - 100% Remote, Blockchain, DeFi

About Halborn Inc

Our mission is to provide value-add security services and products to the world’s most cutting edge technology firms and that starts with blockchain tech. Founded in 2019, Halborn is an elite cyber security company focused on solving complex adversarial problems unique to the cryptocurrency and fintech industries. From breaches and social engineering to stolen private keys and economic hacks, Halborn solves it. Our clientele are the exclusive blockchain companies as well as new startups with high growth trajectories.

Our Culture

Halborn is a globally distributed team of 100+, looking to grow our elite team of white hat hackers, sales professionals, security engineers and DevSecOps specialists who value independence, want to make their own hours, work for themselves and have a passion for the ever evolving cryptocurrency industry.

Our Commitment to Diversity

Halborn Inc is an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, education, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics and celebrates the diversity of its growing team.

We are unable to sponsor or take over sponsorship of employment Visas at this time.

Recruitment agencies and consultants may not submit resumes/CVs through this website or directly to managers. Halborn does not accept unsolicited agency resumes, and will not pay fees to any third-party agency or company that does not have a signed agreement with Halborn Inc.

Responsibilities

• Conduct realistic adversary simulations from conception through reporting.Perform Testing systems, applications, networks and processes.
• Research cutting-edge offensive security techniques.
• Developing tools and exploits.
• Communicate clearly and effectively, both written and orally, the risks that exist and remediations required.
• Work collaboratively and independently on unique or special assignments which may require specialized knowledge and/or experience.
• Comply with Company, Division and Professional ethical standards.

Requirements

• A passion for the cryptocurrency industry.
• Experience in smart contract audits (suggested).
• 5+ years of offensive security experience.
• 2+ years of experience auditing DeFi protocols (Solidity, Solana or any Rust-based protocol).
• Experience using common penetration testing tools, BurpSuite, Metasploit, etc.
• Proficient in at least 1 scripting language.
• Proficiency with common server and workstation operating systems.
• Mastery in testing modern web application languages and frameworks.
• Mastery in testing modern authentication systems and Identity Providers.
• Proficient knowledge of blockchain and smart contract implementations.
• Ability to think critically and identify areas of technical and non-technical risk.
• Ability to write technical reports and communicate technical content to non-technical audiences.
• Relevant security certifications are a plus, but not required (OSCP, OSCE, GPEN, GWAPT, LPT, CISSP).

All candidates who make it past 2nd round will be required to:

• Pass background and criminal record check