Senior Security Engineer (Penetration Testing) (Web3)

TL;DR

Senior Security Engineer (Penetration Testing) (Web3): Assessing and improving the security of web, mobile, cloud, network, and blockchain applications with an accent on application security, source code review, and Web3 testing. Focus on developing advanced penetration testing techniques, researching blockchain security threats, and communicating complex findings to technical and non-technical audiences.

Location: Remote within the United States; candidates must be authorized to work in the US and verify employment eligibility.

Salary: $100,000–$180,000 annual base salary.

Company

Blockchain security company using AI-driven technologies to protect and monitor blockchain protocols and smart contracts.

What you will do

• Perform security assessments of web, mobile, thick-client, browser extension, and blockchain applications.
• Conduct external and internal network penetration tests, cloud security reviews, and source code reviews.
• Prepare comprehensive reports for technical and non-technical audiences.
• Research and develop penetration testing tools, techniques, and methodologies for blockchain applications.
• Contribute tools, presentations, blog posts, and security research to the wider community.

Requirements

• At least 4 years of experience in application security and penetration testing.
• Experience with source code review, mobile application penetration testing, and cloud security risks across AWS, Azure, or GCP.
• Strong JavaScript and TypeScript knowledge, plus scripting experience with Python and Bash.
• Solid understanding of cryptography and a degree in Computer Science or Information Security.
• Passion for cryptocurrency, DeFi, blockchain, and willingness to learn Web3 technologies such as smart contracts.
• Strong spoken and written English communication skills; US work authorization and employment eligibility verification are required.

Nice to have

• Web3 application or smart contract security auditing experience.
• Experience with browser extension security, bug bounty programs, or audit contests.
• OSCP, OSWE, OSCE, GWAPT, or comparable certification.
• Security publications, conference talks, meetup presentations, or active participation in the blockchain security community.

Culture & Benefits

• Remote, full-time work supporting blockchain security research and client engagements.
• Medical, vision, and dental insurance.
• 401(k) plan with company matching, HSA, FSA, and life insurance.
• Flexible paid time off and holidays.
• Opportunities to contribute to research and development and raise blockchain security standards.