About this role.
CertiK seeks a Blockchain Security Expert to build LLM-driven AI agents that improve smart-contract security auditing. The role combines blockchain security expertise, applied AI research, experimentation, and production-oriented software development. The successful candidate will collaborate with security specialists to automate vulnerability discovery, threat detection, and risk assessment. Candidates need at least two years of security or software development experience plus familiarity with blockchain, smart contracts, and agentic coding tools. Prior work on AI agents, automated security analysis, Web3 audits, or on-chain incident analysis is preferred.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
5/5Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would use a layered workflow: parse and normalize the contract, retrieve relevant vulnerability patterns and audit guidance, have the agent generate hypotheses, and validate those hypotheses with static analysis, symbolic execution, tests, or targeted code queries. Findings should include evidence, severity rationale, and confidence scores, with deterministic tools serving as guardrails against unsupported LLM conclusions.
Key risks include hallucinated findings, missed vulnerabilities, prompt injection through untrusted code or documentation, weak reproducibility, and exposure of sensitive customer code. Mitigations include sandboxed tool execution, structured outputs, retrieval from vetted sources, evaluation benchmarks, human review for high-severity findings, strict data controls, and logging that supports auditability.
I would establish a representative benchmark of audited contracts and known vulnerabilities, then measure precision, recall, severity-ranking quality, false-positive rate, time-to-triage, and reviewer acceptance. I would compare the agent against baseline tools and human-assisted workflows, analyze failure cases, and run controlled pilots before broad deployment.
I start by defining the user problem, measurable success criteria, and operational constraints. I then build a small prototype, validate it on realistic data, add reliability and security controls, and integrate monitoring and feedback loops. Production rollout should be incremental, with documentation, ownership, and a clear rollback path.
I would prioritize high-impact and recurring issues such as reentrancy, access-control failures, oracle manipulation, arithmetic and accounting errors, unchecked external calls, upgradeability misconfigurations, and flash-loan-related economic attacks. These categories can cause substantial asset loss and often benefit from combining code-level analysis with protocol-specific contextual reasoning.
About the Company
CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over 4,900 Enterprise clients, secured over $557 billion worth of digital assets, and has detected over 18,000 vulnerabilities in blockchain code. Our clients include leading projects such as OKX, Tether, Ripple, and Pancakeswap. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.
Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.
About the Role
The primary focus of this role is to pioneer the development of an intelligent AI agent powered by large language models (LLMs) to enhance our security audit tools in the blockchain space. As a Blockchain Security Expert on the AI Track, you will work closely with our blockchain security team to bridge cutting-edge academic research with practical applications. Your efforts will be dedicated to developing, testing, and optimizing LLM-driven AI agents that automatically analyze smart contracts and identify potential vulnerabilities. In this role, you’ll be immersed in research and experimentation, exploring new methods to improve threat detection and risk assessment within our security audit platform, thereby directly contributing to more secure blockchain infrastructures.
Responsibilities
- Collaborate with our blockchain security team to develop an LLM-based AI agent for security audit tools.
- Experiment with novel AI techniques to enhance threat detection and risk assessment in blockchain environments.
- Assist in transforming cutting-edge research on AI agents into practical, scalable security auditing solutions.
- Continuously research emerging trends in LLMs, AI agent architectures, and cybersecurity, and proactively propose improvements.
Requirements
- A bachelor’s degree (or higher), preferably in a science or engineering field.
- 2+ years of security or software development experience.
- Familiar with blockchain and smart contract technologies.
- Familiar with agentic coding tools, such as Cursor, Windsurf, Cline, etc.
- Strong and creative problem-solving skills; always willing to learn and embrace new technologies, and to collaborate.
Preferred Qualifications
- Prior research or project experience in developing AI agents or automated security analysis tools.
- Demonstrated ability to translate research insights into effective, production-ready tools.
- Prior knowledge of web3 security audits.
- Hands-on blockchain experience, such as evaluating risks for blockchain projects or analyzing on-chain security events.
Compensation
Additional Information
Compensation: If the role is performed in the US, the target annual compensation is $120,000 – $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
