Smart Contract Auditors

As a Smart Contract Auditor at CryptoSec, you review the security of smart contracts and protocols within the DeFi ecosystem, primarily Solidity contracts on the EVM. You identify vulnerabilities, design and architectural flaws, and work with developers and stakeholders to mitigate risk and improve code quality.

What you'll do

• Review security of smart contracts and protocols in the DeFi ecosystem, primarily Solidity contracts
• Identify vulnerabilities, design and architectural flaws, and quality improvements
• Write clear, concise reports and action steps for developers to quickly mitigate and fix discovered issues
• Interact with developers and key stakeholders when identifying and handling security issues

What you bring

• Demonstrated expertise with Solidity, EVM, and blockchain
• Experience developing and building on DeFi protocols and smart contracts
• Proven experience writing smart contracts and familiarity with Solidity libraries
• Good understanding of the Ethereum blockchain and dApp architecture
• Understanding of Layer 2 solutions and cross-chain bridge technologies
• Experience with compiler, parser, and assembler of smart contract bytecode
• Hands-on experience with static analysis and dynamic analysis of bytecode and source code
• Experience auditing smart contracts and assessing smart contract security risks
• Knowledge of best practices for smart contract development
• Experience discovering vulnerabilities at design and system level
• Knowledge of smart contract vulnerabilities and hands-on experience exploiting them
• Solid understanding of common vulnerability classes and hands-on experience with exploiting them
• Knowledge of various security analysis tools for smart contracts and hands-on experience setting up and using them
• Focus on improving real-world security, not compliance
• Pro-active problem solving mindset
• Strong communication and collaboration skills
• Strong sense of ownership
• Proficient English communication, both written and spoken

Nice to have

• Fuzzing and formal verification experience

What we offer

• Fully remote work, with office locations available in Zug, London, Vancouver, Singapore, Dubai, Hong Kong, and New York

About CryptoSec

CryptoSec helps clients manage cybersecurity, privacy, regulatory, financial crime and operational risks in the decentralized ecosystem. The team operates with a fully remote, collaborative culture that values curiosity, continuous learning, accountability, and diversity of thought.