Smart Contract Security Engineer

Ztakora; Singapore; Remote; SGD 120,000 - 180,000; Full time

Job summary

Ztakora is seeking a Smart Contract Security Engineer to own adversarial review, release assurance, and incident readiness across the protocol surface. You will review threat models and implement robust tests to ensure secure releases across contracts and integrations.

Hands-on Solidity review, strong threat-modeling skills, and practical use of Foundry, Slither and Echidna are required. You will coordinate remediation evidence and maintain incident-response playbooks in a remote, full-time or

Qualifications

• Hands-on Solidity review and security experience.
• Strong threat-modeling and test-design ability.
• Practical use of Foundry, Slither and fuzzing tools.
• Ability to communicate risk without vague severity language.
• Independent and decisive when controls are incomplete.

Responsibilities

• Review protocol designs and implementation changes before release.
• Write adversarial tests for access, accounting and lifecycle invariants.
• Assess multisig, timelock, pause and upgrade configurations.
• Coordinate external review scope and verify remediation evidence.
• Maintain disclosure and protocol incident-response playbooks.

Skills

Solidity review

Threat modeling

Test design

Risk communication

Independence under pressure

Tools

Foundry

Slither

Echidna

Job description

Smart Contract Security Engineer

Own adversarial review, release assurance, privileged-control analysis and incident readiness across the protocol surface.

• 01 Threat model Trust assumptions, attack paths and named owners
• 02 Adversarial coverage Static analysis, fuzzing and invariant challenges
• 03 Release gate Findings, remediation and incident readiness

ROLE BRIEF SC-02 Status Priority Path Core opening Location Remote Engagement Full-time or specialist contract

THREAT MODEL / ADVERSARIAL TESTS / AUDIT / RESPONSE

Challenge accounting, access and lifecycle assumptions before implementation hardens.

• 02 Privileged control Review multisig, timelock, upgrade and emergency-action configurations.
• 03 Release assurance Connect automated checks, findings and verified remediation to release decisions. Exercise disclosure, containment and recovery paths before a live failure.

VAULTX RISK CONTEXT

Asset issuance and controlled settlement concentrate authority across contracts, wallets and operators. This role independently challenges the design and confirms that critical controls behave as intended before a wider release.

Review Ztakora's operating boundaries

Create a living threat model across contracts, integrations and privileged operations.

• 02 Integrate static analysis, fuzzing and invariant checks into the release gate.
• 03 Define severity, remediation and audit-evidence workflows with named owners.
• 04 Run one incident exercise covering a privileged-key, oracle or policy failure.

Accountable scope

• Review protocol designs and implementation changes before release.
• Write adversarial tests for access, accounting and lifecycle invariants.
• Assess multisig, timelock, pause and upgrade configurations.
• Coordinate external review scope and verify remediation evidence.
• Maintain disclosure and protocol incident-response playbooks.

Experience that travels well

• Hands-on Solidity review and smart-contract security experience.
• Strong threat-modeling and test-design ability.
• Practical use of Foundry, Slither and fuzzing tools.
• Ability to communicate risk without vague severity language.
• Independence from delivery pressure when controls are incomplete.

LOCATION Remote

ENGAGEMENT Full-time or specialist contract

SECURITY TOOLCHAIN

Foundry Slither Echidna Threat modeling Incident response

TECHNICAL System discussion

COLLABORATIVE Working session

PAID Scoped trial

DECISION Long-term fit