#vacancy #remote #fulltime

vacancy: Middle Smart-contract Security Auditor Location: world (work according to UTC+3)

What you will do: ● Conduct smart contract audits: analyze project logic, search for vulnerabilities, invariant violations, write PoC tests, develop recommendations for eliminating identified issues; ● Develop internal tools and services: evaluate and implement security tools to expand service offerings; create LLM-based agents and automation systems; ● Research tasks: monitor and analyze new security tools and practices in the industry; ● Write technical articles for the blog.

What we expect: ● 2+ years of experience in an audit company as a smart contract auditor or participation in public contests (Sherlock, Cantina, Code4rena, Code Hawks) with confirmed payouts, with mandatory audit experience on both stacks: EVM and SVM (Solana); ● 3+ years of development experience in one of the languages (Rust, Solidity, Vyper, Python, C/C++/C#, Java, Go); ● Non-trivial thinking and approach to vulnerability search: natural distrust of ready-made solutions, habit of verifying assumptions by experiment; ability to find non-obvious bugs through a combination of different attack vectors; ● Understanding of the core DeFi primitives (Lending, DEXs, Derivatives, Stablecoins, Liquid Staking, Bridges, etc.); ● Confident command of frameworks: Foundry, Hardhat, Anchor, Titanoboa; ● Deep work with AI: experience in creating own LLM-based agents, pipelines, and automation tools; ● Strong mathematical background: understanding of cryptographic primitives and their application in blockchain; ● Understanding of consensus algorithms in blockchain protocols; ● Confident command of English for communication with clients, writing articles, and preparing documentation.

A plus will be: ● Experience in formal verification of smart contracts; ● Conducting security audits on other stacks: Sui, Aptos, TON; ● Confirmed bugs in bug bounty programs (Immunefi and similar); ● Participation in CTF competitions; ● Public findings, writeups, or CVEs; ● Publications or presentations on blockchain security, cryptography, or Web3 topics.

Apply: @dobysh_v