Sr. Security Engineer (Penetration Testing)
at Certik
US / Remote, remote, senior, full time, USD 1,00,000–1,80,000 / year, 4+ years
posted 12 Jan 2022
- Cloud Security
- Mobile Application Penetration Testing
- Azure
- Scanning
- OSCE
- GWAPT
- Threat Modeling
- Bash
- Auditing
- TypeScript
- Application Security
- OSCP
- GCP
- Penetration Testing
- JavaScript
- OSWE
- Source Code Review
- Smart Contract Security Audits
- Cryptography
- AWS
- Python
About the role
Remote: yes Posted: 2022-01-12
Why Us? CertiK is a pioneer in blockchain security, leveraging best-in-class AI technology to protect and monitor blockchain protocols and smart contracts. Founded in 2018 by professors from Yale University and Columbia University, CertiK’s mission is to secure the web3 world. CertiK applies cutting-edge innovations from academia to enterprise, enabling mission-critical applications to scale with safety and correctness.
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.
What you would do
- Perform security assessments on web, mobile, thick client applications, and browser extensions
- Conduct external and internal network penetration tests
- Perform security source code reviews
- Perform cloud security reviews
- Develop comprehensive pentest reports for both technical and non-technical audiences
- Research and develop innovative techniques, tools, and methodologies for pentesting applications in the blockchain space
- Contribute to the community by developing tools, presentations, and blog posts
What they are looking for
- Passionate about cryptocurrency, DeFi, and blockchain, with a willingness to learn Web3 technologies such as smart contracts
- Minimum of 4 years of experience in application security and penetration testing
Read from jobs.lever.co, last seen 3d ago.