About this role.
CertiK is seeking a Blockchain Security Expert to evaluate the security of blockchain infrastructure and deliver security-focused services. The role examines nodes, validators, consensus mechanisms, mempool behavior, networking layers, and chain modules across L1/L2/L3 ecosystems. Core work includes reviewing frameworks such as Cosmos SDK, CometBFT, Geth, and Hyperledger; identifying consensus and permission-model flaws; and building scripts to test adverse network conditions. The position requires strong blockchain internals knowledge, Python or Bash automation, Docker familiarity, careful experimentation, and clear English communication. It is a full-time US-remote role with a disclosed annual target compensation range of $120,000 to $180,000.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
5/5Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would first map the protocol's validator, voting, finality, and slashing assumptions. I would then create controlled test scenarios for equivocation, validator outages, delayed or partitioned messages, malformed proposals, and voting-threshold edge cases, using logs and state comparisons to verify safety and liveness outcomes.
I would deploy a reproducible containerized environment, instrument nodes and network traffic, and use scripts to introduce latency, packet loss, partitions, restarts, resource pressure, and Byzantine-like behaviors. I would define expected invariants, capture telemetry, and document any divergence, halting, unsafe finality, or recovery failure.
I would identify privileged roles and every path that creates, modifies, delegates, or bypasses authority. I would test initialization and upgrade paths, default settings, role revocation, cross-module authorization, transaction validation, and whether malformed inputs or unexpected state transitions can escalate privileges.
I would provide a concise title and severity, explain the affected components and root cause, give clear reproduction steps or a proof of concept, describe realistic impact and preconditions, and recommend a specific remediation. I would validate the fix where possible and communicate uncertainty or environmental constraints transparently.
Python is useful for orchestration, RPC interaction, parsing chain data, generating transactions, and analyzing test results, while Bash supports lightweight automation and environment control. Docker makes node versions, dependencies, configurations, and multi-validator test networks reproducible, which is essential for reliable long-running experiments.
About You
You’re a self-starter who thrives on tackling the toughest and most meaningful problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that #startuplife means that you’re going to be wearing multiple hats. And that’s what motivates you. You’re accountable and obsessed with improvement, both in yourself and in others. You’re up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.
About the Company
CertiK leads blockchain security by protecting smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world’s top blockchain projects.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more.
As a Security Engineer at CertiK, you will contribute to the security offerings of the company, working with the rest of the security team to deliver the best products and services. You might engage directly with CertiK’s existing and future clients, participate in expanding security-related products and services, and follow the blockchain world on emerging security problems and trends.
Responsibilities
- Conduct in-depth security evaluations on blockchain nodes, validators, consensus mechanisms, mempool behavior, networking layers, and chain modules.
- Review and analyze blockchain frameworks such as Cosmos SDK, CometBFT, Geth, Hyperledger, and other L1/L2/L3 infrastructures.
- Identify security issues related to consensus safety, chain halting, permission models flaws, block production vulnerabilities.
- Implement and run custom scripts and test scenarios to simulate real-world validator/network behaviors, chain stress conditions, and edge cases.
Requirements
- Strong written and spoken English communication skills.
- High diligence and strong attention to detail, especially in multi-step testing and long-running experiments.
- Solid understanding of blockchain architecture and node internals (e.g., Cosmos SDK / CometBFT, Go-Ethereum (Geth) internals, and Hyperledger Fabric / Besu)
- Strong scripting & automation skills with Python or Bash
- Familiarity with Docker and containerized testing environments.
- Prior experience in manual Web3 security auditing is preferred, but not required.
What We Offer
- Opportunity to shape the national conversation on blockchain and security.
- Collaborate with industry-leading security researchers, technologists, and global institutions.
- Flexible work environment and mission-driven culture.
Compensation
Additional Information
Compensation: If the role is performed in the US, the target annual compensation is $120,000 – $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
