If you live and breathe ethical hacking and want to test the boundaries of decentralized tech, we should talk. CertiK is searching for a talented Senior Security Engineer specializing in penetration testing to join our global team. This is a fully remote, worldwide role where you get to break things before malicious actors do, safeguarding protocols that handle billions in value.

Overview

CertiK was founded by computer science professors from Yale and Columbia to protect the decentralized ecosystem through rigorous security engineering and artificial intelligence. In this role, you will dig into web applications, APIs, network infrastructure, and Web3 interfaces to hunt down vulnerabilities. You will work side by side with engineering teams and blockchain builders around the world to ensure their systems can stand up against sophisticated modern attacks.

Key Responsibilities

Day to day, you will take ownership of penetration testing projects across diverse environments. Typical tasks include the following items.

Execute end to end penetration tests on web applications, internal networks, cloud environments, and blockchain client systems.
Conduct threat modeling and architecture reviews to spot security flaws early in the development lifecycle.
Write clear, actionable security reports that help developers reproduce and remediate discovered issues.
Collaborate with clients to walk them through vulnerabilities, risk implications, and mitigation steps.
Build custom tools, scripts, and automation workflows to streamline manual testing efforts.
Keep up with emergent attack vectors across the Web3 and traditional cybersecurity landscapes.

Requirements

We care deeply about your practical offensive security chops and problem solving mindset. Successful candidates usually bring a specific blend of experience and skills.

Proven track record performing application security assessments and penetration tests in enterprise or consulting settings.
Deep familiarity with OWASP standards, common vulnerability classes, and practical exploitation techniques.
Hands on experience using industry tools such as Burp Suite, Metasploit, Nmap, and static analysis scanners.
Solid scripting ability in languages like Python, Go, or JavaScript to craft exploits and automation tools.
Strong communication skills with an ability to explain complex technical vulnerabilities to non technical stakeholders.
Familiarity with or genuine curiosity about Web3 architecture, smart contracts, and decentralized protocols.
Industry certifications such as OSCP, OSWE, or similar practical credentials are a definite plus.

What You Will Gain

Working at CertiK puts you right at the intersection of classical cybersecurity and bleeding edge blockchain protocols. You will sharpen your penetration testing skills on novel tech stacks that few security professionals ever get to touch. Our distributed culture means you enjoy the freedom of a 100 percent remote setup while collaborating with some of the sharpest minds in cryptography and computer science.