---
title: 'Blockchain Security Expert - Security Audit Track at CertiK'
canonical: 'https://feeny.ai/job/blockchain-security-expert-security-audit-track-certik-united-states-qw69rw6zy2rf'
type: 'job'
last_seen: '2026-09-07'
---

# Blockchain Security Expert - Security Audit Track at CertiK

- **Company:** CertiK
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2025-11-17
- **Last confirmed live:** 2026-09-07
- **Apply:** https://jobs.lever.co/certik/d3b215da-1367-4a98-9fcf-4a63249125da

## Job description

## About You

You’re a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that #startuplife means that you’re going to be wearing multiple hats. And that’s what motivates you. You’re accountable and obsessed with improvement, both in yourself and in others. You’re up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.

## About the Company

CertiK leads blockchain security by securing smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world’s top blockchain projects.

## About the Role

The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more.

As a Security Engineer at CertiK, you will contribute to the security offerings of the company, working with the rest of the security team to deliver the best products and services. You might engage directly with CertiK’s existing and future clients, participate in expanding security-related products and services, and follow the blockchain world on emerging security problems and trends.

## Responsibilities

- Perform end-to-end security services, including consulting, reviewing, auditing, verifying, testing, and delivering detailed security assessments for blockchain systems such as smart contracts, web3 protocols, L1/L2/L3 infrastructures, and dApps.
- Conduct comprehensive manual code reviews to identify vulnerabilities, logical flaws, economic attacks, and non-obvious edge cases across Solidity, Golang, Rust or other blockchain languages.
- Develop and refine threat models and attack surfaces, covering economic, technical, operational, and trust-assumption risks for blockchain protocols.
- Design and execute security tests, including property-based testing and gas-related analysis.

## Requirements

- Bachelor's degree in Security, Computer Science, Mathematics, Physics, and Engineering
- The ability to efficiently triage and juggle multiple priorities and deadlines.
- Specialist-level knowledge of cybersecurity and security auditing. Can write and deploy smart contracts/blockchain infrastructure and write tests with frameworks.
- Familiar with classic attack vectors and vulnerabilities such as reentrancy, sandwich attacks, overflow/underflow
- The ability to effectively communicate with the clients and internal team, both verbally in English and in writing, about security services and requirements.
- [Preferred] Prior hands-on security auditing experience.

## What We Offer

- Opportunity to shape the national conversation on blockchain and security.
- Collaborate with industry-leading security researchers, technologists, and global institutions.
- Flexible work environment and mission-driven culture.

## About CertiK

## Company Overview
- **One-liner**: CertiK is the largest Web3 security platform, providing end-to-end audit, compliance, and monitoring services for blockchain projects and financial institutions.
- **Entity Type**: Private (Series B, $303.7M total funding)
- **Headquarters**: New York, New York, United States
- **Founded**: 2017 (incorporated as Certified Kernel Tech LLC; LinkedIn lists 2018)
- **Founders**: Prof. Zhong Shao (Yale University) and Prof. Ronghui Gu (Columbia University)

## Core Business
- Primary industry/industries: Blockchain Security, Cybersecurity, Web3 Infrastructure, Compliance & Risk Management
- Target customers: B2B – crypto exchanges, DeFi protocols, stablecoin issuers, custodians, enterprises adopting DLT, and public blockchain ecosystems (e.g., Aptos, Ripple, Sandbox, Polygon, BNB Chain, TON)
- Mission/Purpose: “Security, compliance, and risk management for every stage of your Web3 journey” – from launch to scale, enabling projects to build with confidence, integrity, and real-time insights.

## Products & Services
- **Smart Contract Audits**: Manual code review combined with AI‑powered analysis and optional formal verification; supports Solidity, Rust, Go.
- **Formal Verification**: Proprietary hacker‑resistant kernel technology (CertiKOS) derived from academic research at Yale and Columbia.
- **Penetration Testing**: In‑depth assessment of off‑chain components, APIs, cloud infrastructure (AWS, Azure, GCP), and Web3 applications.
- **SkyNet**: Real‑time security scoring and monitoring for 17,000+ projects (1.8M monthly active users).
- **SkyInsights**: On‑chain AML/CTF compliance, risk analytics, and transaction monitoring (300M+ address labels, 4,000+ incidents detected since 2020).
- **Proof of Reserves**: Attestation services for exchanges and custodians.
- **Bug Bounty Platform**: Fully managed platform with 0% fees on payouts, connecting projects with a global ethical hacker community.
- **DLT Advisory**: Strategy, architecture design, and security assessments for institutions building or integrating distributed ledger technology.
- **Validator & Node Operations**: Managed infrastructure for blockchain networks.

## Market Standing
- **Valuation/Market Cap**: Over $2 billion (source: LinkedIn, citing leading investors).
- **Key Metrics** (public data):  
  - Annual Revenue: $3.9M (LinkedIn estimate)  
  - Total Funding: $303.7M across 10 rounds (latest Series B in April 2022 led by Tiger Global Management and SoftBank Vision Fund)  
  - $483B market cap assessed, 115,000+ vulnerabilities detected, 90,000+ security audit findings  
  - 5,000+ enterprise clients, 500+ applications secured, 100M+ users protected  
  - Team of 125 employees ( +10.9% YoY growth) across 28 countries
- **Notable Investors/Partners**: Sequoia Capital, Coatue, Goldmann Sachs, Shunei Capital, Insight Partners, Tiger Global Management, SoftBank Vision Fund, Hillhouse Investment
- **Growth Signals**: Expanded into AML/CFT compliance (SkyInsights), SOC 2 Type II compliance, and regulatory partnerships in US, Singapire, Hong Kong, Japan, Abu Dhabi, Korea.

## Competitive Advantages
- **Academic Foundaton**: Founded by leading formal‑verification researchers from Yale and Columbia; CertiKOS is a hacker‑resistnt concurrent OS with published peer‑reviewed results.
- **Full‑Lifecycle Security**: One vendor for audits, monitoring, compliance, bug bounties, and node operations – reduces integration complexity for Web3 projects.
- **Scale & Trust**: Largest Web3 security auditor with >5,000 clients, industry recognition (clients inclue Aptos, Ripple, Polygon, BNB Chain).
- **Regultory Alignment**: Proactive invoement in global crypto policy (MiCA, DORA, HKSCF, MAS) gives clients a compliance edge.
- **Dual‑Layer Defense**: Combines AI‑drive analysis with manual expert review and optional formal‑verification – a rarer deep‑tech approach.

## Strategic Focus
- **Expanding Compliance Sute**: Adding real‑time AML monitoring, risk intelligence, and regulatory advisory to capture institutional and enterprise demand.
- **Deeping AI/Formal Methods**: Leveraging AI to automate more of audit pipeline while maintaining formal verification rigor.
- **Geographic Scope**: Growing regulatory relationships in Asia, Middle East, and Europe to serve global VASPs.
- **Product Diversifiction**: Moving from single‑poit audit services to a full “security + infrastructure” platform (nodes, validators, bug bounties).

## Why Work Here
- **Impactful Mission**: Work on security that protects hundreds of billions in digital assets – directly shaping trust in decentralized finance.
- **Cutting‑Edge Technology**: Daily exposure to formal verification, AI security, blockchain internals, and both Web2/Web3 infrastructure.
- **Global & Remote‑Friendly**: Employees across 28 countries; office in New York but distributed workforce (remote‑first culture likely based on hiring patterns).
- **Career Growth**: Roles from Engineer III to Principal; senior positions in Blockchain Security Engineering (Solity, Rust, Golang) and Formal Methods.
- **Acadamic‑Industry Bridge**: Collaborate with founders who are active professors – access to latest research and top conferences.
- **Perks & Culture**: Not explicitly listed, but professional bug bount platform with 0% fees and team of respected security researchers suggests merit‑based, technically rigorous environment.

## Sources
1. [certik.com/company/about](https://www.certik.com/company/about) – Founders, background
2. [certik.com](https://www.certik.com/) – Products, metrics, client list
3. [certik.com/faq](https://www.certik.com/faq) – Service descriptions
4. [linkedin.com/company/certik](https://www.linkedin.com/company/certik) – Revenue, funding, employee count, valuation
5. [jobs.lever.co/certik](https://jobs.lever.co/certik) – Current job openings

## Other roles at CertiK

- [Business Development Associate - Vietnam](https://feeny.ai/job/business-development-associate-vietnam-certik-vietnam-r5n91j6eefx6) — Vietnam
- [Director of AML & Virtual Asset Compliance](https://feeny.ai/job/director-of-aml-virtual-asset-compliance-certik-hong-kong-4st17gj8t10g) — Hong Kong
- [Business Development Manager (Junior to Mid-Level) – Hong Kong](https://feeny.ai/job/business-development-manager-junior-to-mid-level-hong-kong-certik-hong-kong-1qdqh9g2k1y9) — Hong Kong / Shenzhen
- [Compliance Engineer Intern](https://feeny.ai/job/compliance-engineer-intern-certik-europe-asia-zngpn02x2bzf) — Europe / Asia
- [Compliance Engineer](https://feeny.ai/job/compliance-engineer-certik-europe-asia-whfehrws05gk) — Europe / Asia
- [Business Development Manager - Singapore](https://feeny.ai/job/business-development-manager-singapore-certik-singapore-nyx5pxjefqrq) — Singapore
- [LinkedIn Operations](https://feeny.ai/job/linkedin-operations-certik-united-states-bchrfdpewsa2) — United States
- [Web3 BD](https://feeny.ai/job/web3-bd-certik-united-states-be4x9xasf9k7) — United States
- [Public Facing Security Researcher](https://feeny.ai/job/public-facing-security-researcher-certik-united-states-bsck5yk14e0a) — United States
- [IT Operations Specialist](https://feeny.ai/job/it-operations-specialist-certik-new-york-hz503vn2xm3v) — New York, NY