Senior Offensive Security Tester - Blockchain & Web3

Citi; Singapore; Vor Ort; SGD 120.000 - 190.000; Vollzeit

Zusammenfassung

Citi Singapore is seeking a highly skilled Cyber Security professional to join its information security team. You will lead penetration testing across blockchain networks, DeFi protocols, and digital asset systems, combining manual and automated methods to identify vulnerabilities.

The role emphasizes smart-contract reviews (Solidity/Rust/Go/Vyper), cryptography concepts, and collaboration with developers to implement robust security controls.

Qualifikationen

• Background in software development and security, with hands-on experience in blockchain and smart contracts.
• Strong cryptography understanding including symmetric/asymmetric encryption, hashing, and digital signatures.
• Experience developing security scripts for offensive tooling and CI/CD security automation.
• Familiarity with security tools such as Slither, Mythril, Burp Suite, Postman.
• Master’s Degree or PhD with 3+ years in blockchain or a Bachelor’s with 5+ years.
• Passion for offensive security and ethical hacking in blockchain and digital assets.

Aufgaben

• Plan, scope, and execute comprehensive penetration tests against blockchain networks, smart contracts, DeFi protocols, and digital asset custody systems.
• Perform manual and automated source code reviews of smart contracts written in Solidity, Rust, Go, or Vyper to identify logic flaws, reentrancy, front-running, flash loan vulnerabilities, and integer overflows.
• Act as a subject matter expert in offensive information security performing dynamic and manual security assessments on web technologies such as APIs, JavaScript Frameworks, Artificial Intelligence, and Distributed Ledger Technologies.
• Drive remediation by outlining a defense-in-depth approach to business stakeholders and providing strategic solutions to developers on effective preventive and detective security controls.
• Have strong technical writing and presentation skills to report and articulate the vulnerability assessment results to any audience.
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement and automation.
• Conduct research into emerging attack vectors, zero-day exploits, and novel vulnerabilities unique to Web3 and digital asset ecosystems
• Must have or be willing to obtain Industry-accredited security certifications such as: BSCP, GWAPT, GPEN, OSCP, OSWE, CISSP, or other related certifications.

Kenntnisse

Blockchain security

Smart contracts

Offensive security

Cryptography

CI/CD security

Ausbildung

Master’s degree or PhD in relevant field

Bachelor’s degree with 5+ years in blockchain

Tools

Slither

Mythril

Burp Suite

Postman

Jobbeschreibung

Citi Singapore is seeking a highly skilled Cyber Security professional to join its information security team. You will lead penetration testing across blockchain networks, DeFi protocols, and digital asset systems, combining manual and automated methods to identify vulnerabilities.

The role emphasizes smart-contract reviews (Solidity/Rust/Go/Vyper), cryptography concepts, and collaboration with developers to implement robust security controls.