Blockchain Security Researcher
OpenZeppelin
WorldwideremotePosted 12 days ago
Skill Required
Security-ResearcherSmart-Contract-AuditorBlockchain-Security-EngineerWeb-Security-SpecialistCryptography-ResearcherBlockchain-Security-EngineeringCybersecurity-ResearcherBlockchainsecurityPenetration TestingSystem DesignSolidityCybersecurityCryptographyEngineeringdevelopingdesigningEthereumbuildingwrittenHardhatTestNGGolangSolanadesignRustDeFiWeb3.jsandAIFulltime
Key highlights
- Fully remote work
- Paid work trial as part of interview process
- Required proficiency in Solidity and EVM ecosystem
- Strong emphasis on daily use of modern AI tooling
- Flexible time off
- $3,600 baby bonus
Role overview
OpenZeppelin is the security standard onchain finance is built on, dedicated to accelerating the world's transition to an open financial system secured by rigorous research. The Security Services team is responsible for the security of leading web3 protocols and financial institutions, partnering with clients across the full lifecycle of a protocol from architecture and design to deep audits and continuous production coverage.
Responsibilities
- Review smart contracts for top decentralized applications, blockchain infrastructure and financial institutions before they launch. Find vulnerabilities, prioritize them, and present findings to the client.
- Drive audits independently from start to finish, with AI as your primary collaborator. When useful, partner with another researcher to attack the code together and pressure-test findings.
- Partner with client teams during the design phase of new protocols, analyzing architecture, trust assumptions, and operational constraints before any code is written (Design Reviews, Applied Research engagements).
- Use AI efficiently throughout the audit process, and build skills, agents, and workflows that compound across the team.
- Conduct open-ended research into cutting-edge blockchain technologies, vulnerability classes, and emerging attack vectors, and contribute findings back to OpenZeppelin's internal knowledge base and to the broader ecosystem.
Requirements
- Hands-on and practical experience in one or more of the following: software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics or game theory, or DeFi mechanisms.
- Experience designing and developing smart contracts, not only auditing them.
- Strong working knowledge of Solidity and the broader Ethereum / EVM ecosystem (common libraries, frameworks, smart contract patterns).
- Modern AI tooling is central to how you work, not a novelty. You use it daily to expand audit coverage, reason about complex systems, and produce high-quality outputs faster. You evaluate AI-generated code with a critical eye.
- Comfort building and extending your own tooling (skills, agents, prompts, scripts, or full workflows) that the rest of the team can adopt and build on.
- An advanced English level and strong communication skills (oral and written).
Nice to have
- Experience with non-EVM ecosystems and languages, such as Canton, Move (Sui, Aptos), Golang (Cosmos SDK), Cairo (Starknet), Rust-based blockchains (Solana, Stellar), or ZK circuits and cryptography-heavy systems.
- Experience with risk assessment work in the crypto industry (smart contract risk assessment, threat modeling).
- Working hand-in-hand with protocol teams on co-creative engagements, helping design, specify, and implement smart contracts alongside the research.
- Web2 security expertise (penetration testing, web application security, infrastructure security, or appsec).
- Experience with formal verification, invariant testing, or advanced fuzzing tools (Echidna, Foundry, Halmos, Certora).
- A track record in audit contests (Code4rena, Sherlock, Cantina) or bug bounty platforms (Immunefi, HackerOne).
- Public security research output, such as published findings, blog posts, conference talks, or contributions to open-source security tooling.
Benefits
- Meet your teammates at company gatherings around the world 😎
- Enjoy the flexibility of fully remote work 🌎
- Take the time you need with flexible time off 🏝
- Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙
- Build your ideal home office with up to $500 in equipment support 🪑
- Stay covered with medical insurance 🏥
- Keep growing with learning and development opportunities 🧠
- Get a monthly stipend for your preferred co-working space 💻
Additional details
- Please note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information.
- Our interview process takes place on Google Meet and tends to consist of the following stages: Recruiter call (30 minutes), Manager interview (60 minutes), Technical interview (60 minutes), Paid work trial (paid code review assessment), Reference checks.
- Please let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance.
- At OpenZeppelin, we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique.
- As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s Data Privacy Notice.
- If you have questions about this recruitment process or would like to request human review of your application, please contact us at .
- Originally posted on Himalayas