This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Blockchain Security Researcher based in Canada.
Join a globally distributed security research team dedicated to protecting the next generation of blockchain applications and digital financial infrastructure. As a Blockchain Security Researcher, you will help secure decentralized applications, smart contracts, and onchain financial systems used by leading organizations worldwide. You will conduct in-depth security audits, identify critical vulnerabilities, and collaborate with engineering teams to strengthen protocol architectures before and after launch. Working independently and alongside other researchers, you will leverage AI-powered tools to expand audit coverage, streamline workflows, and improve research outcomes. You will also investigate emerging attack vectors and contribute to the broader blockchain security ecosystem. This remote opportunity is ideal for a technically curious researcher passionate about smart contract development, innovative security methodologies, and advancing decentralized finance.
Accountabilities:
- Conduct comprehensive security audits of smart contracts used by decentralized applications, blockchain infrastructure, and financial institutions, identifying vulnerabilities, assessing their severity, and presenting actionable findings to clients.
- Lead security audits independently from planning through final reporting, using AI as a core research collaborator and partnering with other researchers when additional technical perspectives are valuable.
- Participate in protocol design reviews and applied research engagements, evaluating system architecture, trust assumptions, threat models, and operational constraints before implementation begins.
- Collaborate with client engineering teams to analyze, design, specify, and improve smart contract mechanisms and security-critical protocol components.
- Integrate AI tools throughout the audit lifecycle to improve coverage, accelerate complex reasoning, and enhance the quality and efficiency of research deliverables.
- Develop and maintain reusable security tooling, including AI agents, prompts, scripts, and automated workflows that can be adopted and extended by the wider research team.
- Investigate emerging blockchain technologies, vulnerability classes, exploit techniques, and attack vectors to identify risks in evolving onchain systems.
- Document research findings, communicate technical risks clearly to clients, and contribute insights to internal security knowledge bases and the broader blockchain ecosystem.
- Continuously refine audit methodologies and research practices to address new threats and improve smart contract security standards.
Requirements:
- Practical experience in one or more relevant technical fields, including software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics, game theory, or decentralized finance mechanisms.
- Hands-on experience designing and developing smart contracts, beyond reviewing or auditing existing implementations.
- Strong working knowledge of Solidity and the Ethereum Virtual Machine (EVM) ecosystem, including common libraries, development frameworks, smart contract patterns, and protocol architectures.
- Regular, effective use of modern AI tools to improve security audits, reason about complex systems, expand vulnerability coverage, and produce high-quality technical outputs.
- Ability to critically evaluate AI-generated code and findings, identify potential inaccuracies, and apply sound security judgment rather than relying on automated outputs without verification.
- Experience building or extending technical tools and workflows, such as custom scripts, prompts, AI agents, and reusable automation that can benefit a wider engineering or research team.
- Advanced English proficiency, with strong written and verbal communication skills for presenting findings, explaining vulnerabilities, and collaborating with technical stakeholders.
Nice to Have:
- Experience with non-EVM blockchain ecosystems and programming languages, such as Canton, Move for Sui or Aptos, Go for the Cosmos SDK, Cairo for Starknet, Rust-based blockchains such as Solana or Stellar, or zero-knowledge circuits and cryptography-intensive systems.
- Experience in crypto risk assessment, smart contract threat modeling, or evaluating the security of decentralized financial protocols.
- Experience collaborating directly with protocol teams on co-creative engagements, helping design, specify, and implement secure smart contracts.
- Background in Web2 security, including penetration testing, web application security, infrastructure security, or application security.
- Familiarity with formal verification, invariant testing, and advanced fuzzing tools such as Echidna, Foundry, Halmos, or Certora.
- Demonstrated participation in smart contract audit contests, such as Code4rena, Sherlock, or Cantina, or bug bounty platforms such as Immunefi or HackerOne.
- A portfolio of public security research, including published vulnerability findings, technical articles, conference presentations, or contributions to open-source security tools.
Benefits:
- Fully remote work with flexibility to work from anywhere, subject to applicable employment arrangements.
- Flexible time off to support personal well-being and work-life balance.
- Opportunities to meet teammates through company gatherings held around the world.
- Eight weeks of paid leave for primary caregivers and four weeks for secondary caregivers.
- A one-time baby bonus of $3,600.
- Up to $500 in equipment support to help build a home office.
- Medical insurance coverage.
- Learning and professional development opportunities.
- A monthly stipend for a preferred coworking space.
- A collaborative environment focused on advanced blockchain security research, AI-powered tooling, and continuous technical growth.
- A structured interview process consisting of a 30-minute recruiter call, a 60-minute manager interview, a 60-minute technical interview, a paid code review work trial, and reference checks.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1