Position: L1 Researcher and Auditor
Company: Hacken
Experience required: 3y
Category: Security
English level: intermediate
Published: 2023-06-01T00:00:00+03:00

We are seeking a highly skilled and experienced Blockchain Protocol Security Auditor to join our team. As a security auditor, you will be responsible for ensuring the security and integrity of our client's blockchain protocols. You will perform thorough audits, identify vulnerabilities, and recommend solutions to enhance the security of different blockchain systems. Your expertise will play a critical role in safeguarding the blockchain infrastructure and protecting other organizations and their stakeholders from potential security threats.

Requirements
In-depth knowledge of blockchain technology: You must possess a strong understanding of blockchain technology, its underlying principles, and various consensus algorithms. Proficiency in blockchain L0 frameworks like Substrate or Cosmos is highly desirable.
Security audit experience: You should have prior experience in conducting security audits for blockchain protocols or similar distributed systems. Familiarity with industry-standard security frameworks, such as OWASP, NIST, or ISO 27001, is essential.
Solid cryptographic knowledge: A deep understanding of cryptographic algorithms, hash functions, digital signatures, and encryption schemes is required. Experience with secure key management practices and multi-signature schemes is a plus.
Programming and smart contract expertise: Proficiency in programming languages commonly used in blockchain development, such as Solidity, Go, or Rust, is necessary. Experience with auditing smart contracts for vulnerabilities, such as reentrancy attacks or logic flaws, is highly desirable.
Security assessment skills: You should possess strong skills in conducting security assessments, penetration testing, and vulnerability scanning. Knowledge of network security, secure coding practices, and secure software development lifecycle (SDLC) is essential.
Strong analytical and problem-solving abilities: The role requires the ability to analyze complex systems, identify potential security weaknesses, and propose effective solutions. You should be detail-oriented, proactive, and capable of thinking critically.
Excellent communication and reporting skills: You must be able to clearly communicate your findings, recommendations, and technical concepts to both technical and non-technical stakeholders. Strong written and verbal communication skills are essential.

Responsibilities
Conduct security audits of blockchain protocols codebases to identify vulnerabilities and potential security risks.

Communicate with developers and key stakeholders when identifying and handling security issues.

Implement internal tools for simplifying the audit process.

Keep up to date with the latest security vulnerabilities, exploits, and attack techniques related to blockchain protocols and adapt audit procedures accordingly.

Write reports detailing identified vulnerabilities and recommend remediation steps to development teams.


Nice to have
Certifications: Relevant certifications such as Certified Ethereum Developer (CED), Certified Blockchain Security Professional (CBSP), or Certified Information Systems Security Professional (CISSP) are advantageous.
Research contributions: Previous research or publications in the field of blockchain security, cryptographic protocols, or related areas would be highly valued.
Industry experience: Prior experience in the blockchain industry or working with blockchain-based projects would be beneficial.