Назад

Не получаете ответ?

Telegram-вакансии старше 7 дней могут быть уже неактуальны.

8 дней назад

Web3 VAPT Security Pentester (Web3)

18 000 - 36 000$
Формат работы
remote (Global)
Тип работы
fulltime
Грейд
senior
vacancy_detail.hirify_telegram_tooltipВакансия из Telegram канала -

Мэтч & Сопровод

Покажет вашу совместимость и напишет письмо

Описание вакансии

TL;DR
Web3 VAPT Security Pentester (Web3): Performing vulnerability assessment and penetration testing across Web3 dApps, APIs, wallets, backend systems, and mobile applications with an accent on Web3 authentication, wallet integrations, and application security. Focus on identifying attack vectors and business-logic flaws, reviewing mobile and source-code security, and documenting findings with proof of concept, impact, reproduction steps, and remediation guidance.

Web3 VAPT Security Pentester

Company

QuillAudits

Conditions

6 days agoSalary: 18K - 36K

Skills

About the Role

You will perform vulnerability assessment and penetration testing of Web3 dApps, APIs, wallets, backend systems, and mobile applications. You will assess wallet integrations and Web3 authentication flows, identify attack vectors and application-security weaknesses, review mobile applications, and document findings with proof of concept, impact, reproduction steps, and remediation guidance.

Requirements

  • Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent experience
  • 2+ years of hands-on VAPT or application-security experience
  • Strong understanding of Web3, dApps, wallets, and blockchain
  • Strong Web2 and API security knowledge
  • Experience with Burp Suite and security testing tools
  • Experience testing Android and iOS security and reviewing source code
  • Familiarity with Solidity, EVM, Foundry, Hardhat, ethers.js, or viem is a plus

Responsibilities

  • Perform VAPT of Web3 dApps, APIs, wallets, and backend systems
  • Test wallet integrations, SIWE, signature verification, EIP-712, transaction flows, WalletConnect, and Web3 authentication
  • Identify Web3 attack vectors and business-logic flaws
  • Perform Web2 and API security testing
  • Conduct Android and iOS mobile application security testing
  • Review source code, secure storage, cryptography, and runtime behavior
  • Prepare technical reports with proof of concept, impact, severity, reproduction steps, and remediation

Benefits

  • Flexible working arrangements
  • Remote work
  • Five-day work week
  • Performance-based incentives
  • Global conferences and meetups
  • Company-paid workations twice a year

Hiring Process

Application review → technical challenge (task-based screening) → technical interview → founder's connect → offer

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →

Текст вакансии взят без изменений

Источник -