[All remote jobs](https://jobicy.com/jobs.md)Open role[![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg)](https://jobicy.com/company/certik.md)Remote opportunity at[CertiK](https://jobicy.com/company/certik.md)

# Blockchain Security Engineer – (Solidity / Rust / Golang)

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

[Apply for this job](#job-application)[View company](https://jobicy.com/company/certik.md)Share24 Aug 2026Published27Listing views2Application actions23 Sep 2026Apply before  Opportunity details

## About this role.

AI SummaryCertiK is hiring a junior Blockchain Security Engineer to support audits of smart contracts, blockchain protocols, and decentralized applications. The role combines vulnerability assessment, guided security research, and contributions to internal security tooling and audit methodologies. Candidates need foundational blockchain experience across EVM, Solana, Move, nodes, SDKs, or related decentralized infrastructure, plus proficiency in languages such as Rust, Go, Solidity, or Python. This is a US-remote, full-time opportunity with a disclosed annual salary range of $102,000 to $180,000. Strong academic grounding in computer science, mathematics, information security, cryptography, or demonstrated Web3 security achievements is advantageous.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

4/5EasyHard

### Pace & Pressure

4/5RelaxedFast-paced

### Autonomy Level

3/5GuidedFull ownership

### Communication Load

4/5IndependentCollaborative

AI insightThe position requires specialized knowledge of blockchain architectures, smart-contract languages, threat modeling, and exploit patterns. Although junior-level work is conducted under guidance, audits demand careful, high-impact technical analysis and clear reporting.

## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job medianHighly competitive$141,000US market range$102k–$180k0$198k

AI insightThe disclosed US annual salary range is $102,000 to $180,000 USD, with a midpoint of $141,000 USD. This range is competitive for a junior blockchain security engineer in the US, reflecting the specialized skills required for smart-contract and protocol security auditing.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[Blockchain Security](https://jobicy.com/jobs?search_keywords=Blockchain%20Security.md)[Smart Contract Auditing](https://jobicy.com/jobs?search_keywords=Smart%20Contract%20Auditing.md)[Solidity](https://jobicy.com/jobs?search_keywords=Solidity.md)[Rust](https://jobicy.com/jobs?search_keywords=Rust.md)[Golang](https://jobicy.com/jobs?search_keywords=Golang.md)[Web3](https://jobicy.com/jobs?search_keywords=Web3.md)[DeFi](https://jobicy.com/jobs?search_keywords=DeFi.md)[Threat Modeling](https://jobicy.com/jobs?search_keywords=Threat%20Modeling.md)[Vulnerability Assessment](https://jobicy.com/jobs?search_keywords=Vulnerability%20Assessment.md)[Security Research](https://jobicy.com/jobs?search_keywords=Security%20Research.md)

Sample interview questionsHow would you approach a security review of a Solidity smart contract?I would first understand the protocol's intended behavior, trust boundaries, privileged roles, and asset flows. Then I would review the code systematically for common issues such as access-control flaws, reentrancy, unsafe external calls, oracle manipulation, arithmetic assumptions, and upgradeability risks, while creating test cases or proofs of concept for suspected issues. Finally, I would document findings with severity, impact, reproduction steps, and practical remediation guidance.

What is reentrancy, and how can it be mitigated?

Reentrancy occurs when a contract makes an external call before updating its internal state, allowing the recipient to call back into the original function and potentially repeat an action such as withdrawing funds. Common mitigations include following checks-effects-interactions, using reentrancy guards, minimizing external calls, and employing pull-payment patterns where appropriate.

How would you conduct threat modeling for a decentralized application?

I would identify critical assets, actors, privileged roles, external dependencies, entry points, and trust assumptions. I would map attack paths involving smart contracts, off-chain services, bridges, wallets, governance, and oracle integrations, then assess likelihood and impact for each risk. The output would prioritize mitigations, monitoring controls, and test scenarios for the highest-risk assumptions.

What differences would you consider when auditing an EVM smart contract versus a Solana program?

For EVM contracts, I would focus on Solidity or Vyper semantics, call behavior, storage layout, delegatecall, proxy patterns, and gas-related execution assumptions. For Solana programs, I would closely examine account ownership, signer validation, program-derived addresses, account initialization, serialization, cross-program invocations, and rent or authority handling. In both cases, I would validate that authorization and state transitions match the protocol's intended invariants.

Describe how you would communicate a vulnerability finding to an engineering team or client.

I would provide a concise title and severity assessment, explain the affected components and security impact, and include a minimal reproducible proof of concept where possible. I would clearly state assumptions, recommend a prioritized fix, and identify any regression tests or monitoring measures needed. During discussion, I would remain collaborative and ensure the team understands both the technical root cause and the business risk.

About the Company

CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over 4,900 Enterprise clients, secured over $557 billion worth of digital assets, and has detected over 18,000 vulnerabilities in blockchain code. Our clients include leading projects such as OKX, Tether, Ripple, and Pancakeswap. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.

About the Role

We are seeking a Junior Blockchain Security Engineer with a strong security mindset and foundational technical expertise across smart contracts, blockchain nodes, and decentralized infrastructure. In this role, you will support Web3 projects by assisting in code audits, contributing to security tools, and conducting research under guidance. If you are eager to grow your career in blockchain security and passionate about securing decentralized technologies, we’d love to hear from you.

### Responsibilities

*  Audit and review codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to identify and remediate vulnerabilities.
* Conduct guided security research, explore new attack vectors, and deliver actionable insights.
* Contribute to the design, development, and maintenance of internal security tools and frameworks.
* Support improvements to internal processes, methodologies, and service offerings, ensuring high-quality delivery for clients.

### Requirements

* Bachelor’s, Master’s, or PhD in Mathematics, Computer Science, or Information Security.
* At least 1 years of hands-on experience with blockchain technologies, including: Smart contracts (EVM chains, Solana, Move, etc.), Blockchain protocols (nodes, SDKs, Cosmos, etc.)
* Experience in threat modeling, risk assessment, and security analysis.
* Proficiency in one or more programming languages: Rust, Go, Solidity, Python, etc.
* Passion for Cryptocurrency, DeFi, and Blockchain technologies.

### Preferred Qualifications

* Solid academic or practical background in Mathematics, Cryptography, or Cybersecurity.
* Demonstrated experience conducting audits and collaborating with leading Web3 protocols.
* Recognized achievements such as published CVEs, or strong placements in Attackathons, Bug Bounties, or Audit Contests.

### Compensation

### Additional Information

Compensation

Target annual salary for this role performed in the US is $102,000 – $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.

CertiK accepts applications for this position on an ongoing basis. CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.

CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. [https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf](https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

All CertiK employees are expected to actively support diversity on their teams, and in the Company.

Show more

[Apply now >](https://jobicy.com/jobs/151470-blockchain-security-engineer-solidity-rust-golang.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

Matched by job category10 related opportunities[Cybersecurity](https://jobicy.com/categories/cybersecurity.md) [Browse all jobs](https://jobicy.com/jobs.md)
*
![Docplanner logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/84f2fa86-221.png)
Docplanner  Aug 24

### [Senior Platform Security Engineer (100% Remote within Poland)](https://jobicy.com/jobs/151521-senior-platform-security-engineer-100-remote-within-poland.md)

Welcome to the good side of tech 👋 You might have heard about us, but with a different name: Znany Lekarz. It all started 12 years ago when we asked…

*
![Docplanner logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/84f2fa86-221.png)
Docplanner  Aug 24

### [Senior Platform Security Engineer (100% Remote within Spain)](https://jobicy.com/jobs/151520-senior-platform-security-engineer-100-remote-within-spain.md)

Welcome to the good side of tech 👋 You might have heard about us, but with a different name: Doctoralia. It all started 12 years ago when we asked ourselves:…

*
![Qventus logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/0ad7e933ffa7b62281cc4b26710abfab.jpeg)
Qventus  Aug 24

### [Senior Security Engineer](https://jobicy.com/jobs/151504-senior-security-engineer-2.md)

On this journey for over 12 years, Qventus is leading the transformation of healthcare. We enable hospitals to focus on what matters most: patient care. Our innovative solutions harness the…

*
![Sporty Group logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8e6c246a-221.png)
Sporty Group  Aug 24

### [Security Platform Engineer](https://jobicy.com/jobs/151442-security-platform-engineer.md)

About the roleStrengthen Sporty’s security monitoring and detection capability by managing, tuning, and continuously improving EDR and SIEM platforms. Ensure security alerts are accurate, actionable, and provide reliable visibility across…

*
![Lakeshore Learning Materials, LLC logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/d8ba23f6-221.jpg)
Lakeshore Learning Materials, LLC  Aug 23

### [Manager of IT Security](https://jobicy.com/jobs/149591-manager-of-it-security.md)

Company DescriptionAt Lakeshore, we create innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, we’ve grown into a global community—with a thriving e-commerce business, multiple…

*
![Tenable logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01879e02-221.jpg)
Tenable  Aug 22

### [Senior Director, Ecosystem & Solution Architectures – Technical Alliances](https://jobicy.com/jobs/151413-senior-director-ecosystem-solution-architectures-technical-alliances.md)

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent…

*
![Canonical Ltd. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)
Canonical Ltd.  Aug 22

### [Security Risk Management Specialist](https://jobicy.com/jobs/149564-security-risk-management-specialist.md)

In security risk management we’re looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security…

*
![Canonical Ltd. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)
Canonical Ltd.  Aug 22

### [Ubuntu Security Engineer](https://jobicy.com/jobs/149565-ubuntu-security-engineer.md)

Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives…

*
![Canonical Ltd. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)
Canonical Ltd.  Aug 22

### [Senior Security Operations Engineer](https://jobicy.com/jobs/149578-senior-security-operations-engineer.md)

The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and…

*
![Canonical Ltd. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)
Canonical Ltd.  Aug 22

### [Head of Security Operations](https://jobicy.com/jobs/149541-head-of-security-operations.md)

This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies….