Blockchain Penetration Tester & Security Engineer

Remote; San Francisco (CA); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, vision, and dental insurance

401(k) with company matching

HSA/FSA benefits

Flexible paid time off

Job summary

CertiK, a leader in blockchain security, seeks a security-focused professional for hands-on penetration testing and security consulting across web, mobile, and blockchain applications. You will review code, assess cloud security, and craft detailed reports for diverse audiences to raise industry standards.

You will have opportunities to contribute to research and development, participate in security tooling, and engage with high-profile clients while advancing the security of Web3 technologies.

Qualifications

• 4+ years of experience in application security and penetration testing.
• Experience in source code review for different languages, especially JavaScript and TypeScript.
• Experience in mobile application penetration testing.
• Familiar with cloud platforms and their security risks (AWS, Azure, GCP).
• Proficient in Python and Bash scripting.
• Strong cryptography understanding.
• BS/MS/PhD in Computer Science or Information Security.
• Strong written and spoken communication skills.

Responsibilities

• Perform security assessments on web, mobile, thick client apps, and browser extensions.
• Conduct external and internal network penetration tests.
• Perform security source code reviews.
• Perform cloud security reviews.
• Develop comprehensive pentest reports for technical and non-technical audiences.
• Research and develop new pentesting techniques and tools for blockchain security.
• Contribute to the community with tools, presentations, and blogs.

Skills

Application security

Penetration testing

JavaScript

TypeScript

Python

Bash

Cloud security

Education

BS/MS/PhD in Computer Science or Information Security

Tools

JavaScript

TypeScript

Python

Bash

AWS

Azure

GCP

Job description

CertiK, a leader in blockchain security, seeks a security-focused professional for hands-on penetration testing and security consulting across web, mobile, and blockchain applications. You will review code, assess cloud security, and craft detailed reports for diverse audiences to raise industry standards.

You will have opportunities to contribute to research and development, participate in security tooling, and engage with high-profile clients while advancing the security of Web3 technologies.