Remote opportunity at
CertiKSr. Security Engineer (Penetration Testing)
CertiK seeks a remote full-time Sr. Security Engineer specializing in Penetration Testing. Established in 2018 by professors from Yale and Columbia, the organization applies academic innovations…
Career Tools
About This Role
CertiK seeks a remote full-time Sr. Security Engineer specializing in Penetration Testing. Established in 2018 by professors from Yale and Columbia, the organization applies academic innovations to enterprise environments to protect blockchain protocols, smart contracts, and decentralized applications using AI technology. This position focuses on application security, threat modeling, security assessments, and conducting penetration tests across various software architectures. Professionals in this role will also engage in research and development…
Job Description
CertiK seeks a remote full-time Sr. Security Engineer specializing in Penetration Testing. Established in 2018 by professors from Yale and Columbia, the organization applies academic innovations to enterprise environments to protect blockchain protocols, smart contracts, and decentralized applications using AI technology.
This position focuses on application security, threat modeling, security assessments, and conducting penetration tests across various software architectures. Professionals in this role will also engage in research and development to help elevate blockchain security standards while collaborating with clients globally.
The company provides medical, dental, and vision insurance, a 401(k) plan featuring company matching, HSA, FSA, life insurance, accidental death and dismemberment coverage, and flexible time off including holidays.
Responsibilities
- Conduct security evaluations on browser extensions, mobile applications, thick clients, and web platforms
- Execute internal and external network penetration tests
- Review security source code
- Perform cloud security assessments
- Draft detailed penetration testing reports geared toward technical and non-technical audiences
- Research and create innovative tools, methodologies, and techniques for blockchain application security
- Contribute publicly through blog posts, presentations, and open-source tooling
Requirements
- At least 4 years of professional experience in penetration testing and application security
- Strong interest in cryptocurrency, DeFi, and blockchain technologies with a readiness to master Web3 concepts
- Familiarity conducting source code reviews with strong proficiency in JavaScript and TypeScript
- Background testing mobile applications
- Working knowledge of cloud platforms and associated security threats including AWS, GCP, and Azure
- Programming capabilities in scripting languages like Bash and Python
- Deep understanding of cryptography
- Strong verbal and written communication abilities
Qualifications
- Bachelor of Science, Master of Science, or Doctor of Philosophy in Information Security or Computer Science
- Experience pentesting Web3 solutions such as Dapps, crypto wallets, exchanges, and key custodians
- Background performing smart contract security audits
- Familiarity with the security risks and architecture of browser extensions
- Active involvement in the blockchain security community
- Relevant credentials including OSCP, OSWE, OSCE, GWAPT, or similar certifications
- Prior participation in bug bounty programs and audit contests
- History of speaking at security conferences or local meetups and publishing security-focused blog posts
Core Skills
Benefits
- Medical, dental, and vision insurance
- 401(k) plan with company match
- Life and accidental death and dismemberment insurance
- Health Savings Account with high-deductible plans
- Flexible Spending Account
- Flexible paid time off and holidays
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting explicitly indicates that the role is remote.
What is the salary range for this job?
The target annual base salary for candidates performing the role in the United States ranges from $100,000 to $180,000, determined by individual experience and qualifications.
What employment type is this?
This is a full-time position.
What is the minimum experience required?
Applicants must have a minimum of 4 years of experience in penetration testing and application security.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
