All jobs
Blockchain Security Researcher
About this role
OpenZeppelin is seeking a Blockchain Security Researcher to join its Security Services team. The role focuses on assessing and improving the security of leading web3 protocols and financial institutions, from design reviews to production-stage coverage. The candidate will work on reviewing smart contracts, driving audits, collaborating with client teams during design, and researching emerging blockchain technologies and attack vectors. The position emphasises practical experience in software, cybersecurity, cryptography, or related fields, with strong Solidity and Ethereum knowledge and frequent use of AI tools in the audit process. The employer highlights remote work options, competitive benefits, and a diverse, inclusive workplace.
What you would do
- Review smart contracts for clients before launch, identify vulnerabilities, prioritise findings and present them to the client
- Lead audits from start to finish, using AI as a primary collaborator and collaborating with a second researcher when appropriate
- Engage with client design teams during protocol design to analyse architecture and trust assumptions before coding begins
- Utilise AI throughout the audit process and develop workflows and tools that the team can adopt
- Conduct open-ended research into blockchain technologies and vulnerability classes and share findings internally and with the ecosystem
What they are asking for
- Hands-on experience in software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics or game theory, or DeFi mechanisms
- Experience designing and developing smart contracts in addition to auditing
- Strong knowledge of Solidity and Ethereum/EVM ecosystem
- Regular use of modern AI tooling to enhance audit work and ability to critically evaluate AI-generated code
- Ability to build and extend tooling (skills, agents, prompts, scripts, or workflows) for team use
- Advanced English proficiency and solid communication skills
Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.