Sr. Security Engineer (Penetration Testing)

As a Senior Security Engineer (Penetration Testing) at CertiK, you perform security assessments and penetration testing across web, mobile, cloud, and blockchain applications. You work on a full range of security services, from consulting and smart contract audits to threat modeling and innovative research, helping secure the Web3 world alongside a team of blockchain security specialists.

What you'll do

• Perform security assessments on web, mobile, thick client applications, and browser extensions
• Conduct external and internal network penetration tests
• Perform security source code reviews
• Perform cloud security reviews
• Develop comprehensive penetration testing reports for both technical and non-technical audiences
• Research and develop innovative techniques, tools, and methodologies for penetration testing applications in the blockchain space
• Contribute to the community by developing tools, presentations, and blog posts

What you bring

• Minimum 4 years of experience in application security and penetration testing
• Experienced source code reviewer across different languages, with strong understanding of JavaScript and TypeScript
• Hands-on experience in mobile application penetration testing
• Familiarity with cloud platforms and their security risks, such as AWS, Azure, and GCP
• Programming experience with scripting languages such as Python and Bash
• Solid understanding of cryptography
• BS, MS, or PhD in Computer Science or Information Security
• Strong spoken and written communication skills
• Passionate about cryptocurrency, DeFi, and blockchain, with willingness to learn Web3 technologies such as smart contracts

Nice to have

• Experience penetration testing Web3 applications such as crypto exchanges, wallets, Dapps, and key custodian solutions
• Experience in smart contract security audits
• Familiarity with browser extension architecture and security risks
• Active participation in the blockchain security community
• OSCP, OSWE, OSCE, GWAPT, or comparable certification
• Participation in bug bounty programs and audit contests
• Published security-related blog posts and speaking experience at security conferences or local meetups

What we offer

• Target annual base salary of $100,000 to $180,000 (exact compensation determined by skills and experience)
• Medical, vision, and dental insurance
• 401(k) plan with company matching
• Life and accidental death and dismemberment insurance
• HSA (with high deductible plan) and FSA
• Flexible paid time off and holidays
• Fully remote

About CertiK

CertiK is a pioneer in blockchain security, founded in 2018 by professors from Yale University and Columbia University. The company leverages AI technology to protect and monitor blockchain protocols and smart contracts. To date, CertiK has worked with over 3,200 enterprise clients, secured over $310 billion in digital assets, and detected over 60,000 vulnerabilities in blockchain code, serving leading projects such as Aave, Polygon, Binance Smart Chain, Terra, Yearn, and Chiliz.