[All remote jobs](https://jobicy.com/jobs.md)[![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg)](https://jobicy.com/company/certik.md)[CertiK](https://jobicy.com/company/certik.md) # Security Research Internship Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/certik.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 3k–8k / moDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentInternshipExperienceOpen levelPublished16 Oct 2026Apply before15 Nov 2026Listing views39Application actions1Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. CertiK is seeking a graduate-level Security Research Intern to investigate security threats affecting distributed systems, blockchain-adjacent infrastructure, and applications. The role includes developing security-analysis tools, reviewing sandboxes, virtual machines, network modules, and distributed-system implementations. Interns will identify vulnerabilities, build proof-of-concept exploits, create mitigations, and publish findings in academic or industry venues. Strong foundations in vulnerability research and exploitation are required, while Rust, Go, WASM, and CTF experience are preferred. This is a research-intensive internship with broad exposure to malware analysis, anomaly detection, reverse engineering, mobile analysis, and fraud detection. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 4/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe role requires advanced security-research capability, including finding exploitable vulnerabilities in complex systems and producing proof-of-concept exploits. A Masters or PhD track plus prior web or systems exploitation experience indicates a highly technical internship. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per month)Highly competitive$5,500US market range (per month)$3k–$8k0$8.80k AI insightThe monthly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer discloses compensation of $3,000 to $8,000 per month for a full-time internship, with a midpoint of $5,500 per month. This range is plausible for a US-based, graduate-level security research internship and aligns with the estimated monthly market range of $3,000 to $8,000. ## Core skills Skills and capabilities most closely associated with this opportunity. [Vulnerability research](https://jobicy.com/jobs?search_keywords=Vulnerability%20research.md)[Exploit development](https://jobicy.com/jobs?search_keywords=Exploit%20development.md)[Malware analysis](https://jobicy.com/jobs?search_keywords=Malware%20analysis.md)[Reverse engineering](https://jobicy.com/jobs?search_keywords=Reverse%20engineering.md)[Network anomaly detection](https://jobicy.com/jobs?search_keywords=Network%20anomaly%20detection.md)[Mobile application security](https://jobicy.com/jobs?search_keywords=Mobile%20application%20security.md)[Distributed systems security](https://jobicy.com/jobs?search_keywords=Distributed%20systems%20security.md)[Sandbox security](https://jobicy.com/jobs?search_keywords=Sandbox%20security.md)[Virtual machine security](https://jobicy.com/jobs?search_keywords=Virtual%20machine%20security.md)[Web application security](https://jobicy.com/jobs?search_keywords=Web%20application%20security.md)[System software security](https://jobicy.com/jobs?search_keywords=System%20software%20security.md)[Rust](https://jobicy.com/jobs?search_keywords=Rust.md)[Go](https://jobicy.com/jobs?search_keywords=Go.md)[WebAssembly](https://jobicy.com/jobs?search_keywords=WebAssembly.md)[CTF competitions](https://jobicy.com/jobs?search_keywords=CTF%20competitions.md) Sample interview questionsDescribe a vulnerability you discovered or analyzed and how you validated its impact.I would explain the target's attack surface, the root cause, the reproduction steps, and a minimal proof of concept. I would also describe how I confirmed impact safely, proposed a remediation, and verified that the fix addressed the issue without introducing regressions. How would you approach auditing a distributed system's network module for security weaknesses? I would first map trust boundaries, message formats, authentication, peer-discovery flows, and state transitions. Then I would use code review, fuzzing, malformed-message testing, concurrency analysis, and adversarial network simulations to identify issues such as input-validation flaws, resource exhaustion, replay attacks, and consensus-related risks. What is your process for developing a proof-of-concept exploit responsibly? I start by reproducing the issue in an isolated environment and minimizing the exploit to demonstrate only the necessary impact. I document prerequisites, reliability limits, and affected versions, avoid unnecessary data access or disruption, and pair the proof of concept with mitigation guidance and coordinated disclosure practices. How can fuzzing support vulnerability discovery in systems software? Fuzzing can generate unexpected or malformed inputs that expose crashes, memory-safety defects, parser bugs, and logic errors. I would define meaningful input corpora, add sanitizers and coverage instrumentation, triage crashes, minimize failing cases, and combine fuzzing results with manual root-cause analysis. What security considerations would you examine when reviewing a sandbox or virtual-machine implementation? I would examine isolation boundaries, privilege transitions, host-guest interfaces, syscall or API filtering, shared-memory use, device emulation, serialization, and escape paths. I would also assess resource controls, update mechanisms, logging, and whether untrusted code can influence privileged components through malformed inputs or race conditions. Opportunity details ## About this role. About CertiK One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured over $310 billion worth of digital assets, and has detected over 60,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Yearn, and Chiliz. Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors. About the role We are seeking security research interns to join a top-notch security research team. We are working on a wide range of security research topics, including malware analysis, vulnerability detection, network anomaly detection, mobile app analysis, reverse engineering, and fraud detections. Multiple research tasks are ready to be explored. ### Responsibilities * Develop analysis tools to facilitate security discovery and design mitigation techniques to deter security threats. * Review system implementation of sandbox, VM, network modules, and critical distributed system. * Perform vulnerability discovery and develop PoC exploits to large distributed system implementations. * Publish research findings in related academic and industry venues. ### Requirements * Pursuing Masters or PhD in Computer Science or Cybersecurity related field. * Experiences in vulnerability discovery and exploitation on web applications or system software. ### Preferred * Experiences in WASM or Rust/Go development is a plus. * CTF experiences are a plus as well. ### Compensation ### Additional Information Compensation $3000 – $8000/month (Full Time). The exact compensation at which this internship is filled will be determined by the skills and experience of qualified candidates. #blockchain #startups #hiring CertiK accepts applications on an ongoing basis for this position until it is filled. The approximate date of closing will be April 30, 2024. CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law. CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. [https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf](https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf) All CertiK employees are expected to actively support diversity on their teams, and in the Company. Show more [Apply now >](https://jobicy.com/jobs/155448-security-research-internship.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Oct 16 New ### [IAM Security Engineer](https://jobicy.com/jobs/155431-iam-security-engineer.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Oct 16 New ### [Security Engineer](https://jobicy.com/jobs/155437-security-engineer-3.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg) Samsara Oct 16 New ### [Senior Security Operations Engineer](https://jobicy.com/jobs/155429-senior-security-operations-engineer-3.md) Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 16 New ### [Principal Security Researcher – EDR (Windows)](https://jobicy.com/jobs/155418-principal-security-researcher-edr-windows.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![Vercel logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/a6aded72-221.png) Vercel Oct 16 New ### [Security Software Engineer, IAM](https://jobicy.com/jobs/147750-security-software-engineer-iam.md) About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built…. * ![Socket logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/1314ce3c-221.png) Socket Oct 16 New ### [Forward Deployed Engineer, Python](https://jobicy.com/jobs/153341-forward-deployed-engineer-python.md) About Us Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our… * ![Close logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/Closeio.png) Close Oct 15 New ### [Senior Product Security Engineer (USA Only, 100% Remote)](https://jobicy.com/jobs/155398-senior-product-security-engineer-usa-only-100-remote.md) About UsSince 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it,… * ![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png) UpGuard Oct 15 New ### [Chief Information Security Officer](https://jobicy.com/jobs/153270-chief-information-security-officer-2.md) Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 14 ### [Principal macOS Security Researcher](https://jobicy.com/jobs/155303-principal-macos-security-researcher.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg) Beyond Finance Oct 14 ### [Senior Cloud Security Engineer](https://jobicy.com/jobs/155257-senior-cloud-security-engineer.md) At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,… [Browse all jobs](https://jobicy.com/jobs.md)