--- title: 'Lead Blockchain Security Developer (Canton) at OpenZeppelin' canonical: 'https://feeny.ai/job/lead-blockchain-security-developer-canton-openzeppelin-remote-y5m61rsmb7dp' type: 'job' last_seen: '2026-09-15' --- # Lead Blockchain Security Developer (Canton) at OpenZeppelin - **Company:** OpenZeppelin - **Location:** Remote - **Work type:** remote - **Posted:** 2026-05-21 - **Last confirmed live:** 2026-09-15 - **Apply:** https://openzeppelin.com/careers/opening/?gh_jid=7742510003 ## Job description ## About us OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research. Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap. We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle. Please note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information. The Secure Development team ❤️ OpenZeppelin is the security partner of choice for the most important protocols in Web3. Our Secure Development team sits at the intersection of building and breaking: we design, implement, and harden production-grade libraries and smart contracts for leading projects across EVM, Starknet, Stellar/Soroban, Arbitrum Stylus, Aptos, and beyond, often as an embedded extension of the client's engineering team. We work the way the rest of the industry will five years from now. Every developer on the team is a fully AI-native engineer, supported by outstanding internal AI tooling built for every phase of secure development. Developers own their workstreams end-to-end — agents amplify their effectiveness, and peers, security researchers, and external auditors provide rigorous review on every piece of work that ships. The Canton Network engagement This role joins us at the start of a groundbreaking [24-month, multi-million-dollar commitment](https://github.com/canton-foundation/canton-dev-fund/blob/main/proposals/2026-04-OpenZeppelin-canton-ecosystem-stack.md)to build the open-source DeFi foundations of the world's most institutional blockchain. You'll deliver production-ready Reference Implementations (privacy-preserving DEX, lending, cross-chain stablecoin settlement, confidential auction launchpad, and more), the OpenZeppelin Contracts Library for Daml that Canton developers will import, and Canton standards implementation. Within this, you will: - Own the development of the OpenZeppelin Contracts Library for Daml end-to-end: vaults, hooks, RBAC, credentials, messaging gateway, accounts, and more. The audited primitives Canton developers will import. - Lead the technical design and implementation of the year-1 Reference Implementations: privacy-preserving DEX, lending protocol, cross-chain stablecoin settlement, and confidential auction launchpad. - Implement and shepherd the OZ Daml versions of CIP-56, CIP-86, CIP-103, and CIP-104. Coordinate with Digital Asset on spec evolution and with ChainSafe on middleware alignment. - Run client-facing roadmap, design, and milestone discussions with Digital Asset, the Canton Foundation, and ChainSafe. - Collaborate with OpenZeppelin's auditors and security researchers on threat models, audit prep, and full-stack reviews for every Reference Implementation. - Use AI systems as core daily tools. Extend them: build agents, skills, and workflows that compound the team's leverage on the Canton engagement and beyond, including in security practices - Contribute developer-experience and security feedback upstream into the Canton protocol, Splice, the Daml SDK, and the Splice Wallet Kernel. - Conduct open-ended research around privacy-preserving DeFi, multi-party authorization patterns, and Canton-specific primitives; you'll have time to publish and contribute back to OpenZeppelin's body of knowledge. Location OpenZeppelin is a fully remote organization, however preference is given to candidates located within UTC-8 to UTC+3 time zones to be considered. You have - Production Daml fluency. You understand templates, choices, controllers/observers/signatories, multi-party authorization, sub-transaction views, and propose/accept patterns as first-class primitives. Running an SV, contributing to Splice internals, governance, or Canton Coin tokenomics. - 3+ years of experience in UTXO-based protocol development (Canton, Cardano, Midnight, Zcash, Aleo, Mina, or similar). - 3+ years of experience on DeFi engineering in production. AMMs, vaults (ERC-4626 or equivalent), lending protocols, cross-chain settlement. - A security-first mindset. this is non-negotiable. You have demonstrable experience either auditing, breaking, or hardening production systems — published threat models, audit reports, responsible disclosures, or equivalent output. - Library / SDK API design taste. You've built reusable, import-first developer libraries, not just applications. You have opinions on extensibility patterns (hooks, modular components, override points) and on what makes an audited primitive pleasant to consume. - Cross-chain interoperability exposure. Production work with at least one major cross-chain messaging protocol (Chainlink CCIP, LayerZero, Wormhole, Axelar, or similar). - Institutional / compliance design fluency: You can design with credential gates, multi-party attestation, custody flows, and compliance hooks as native constraints. - An AI-native workflow. Claude Code, Cursor, or equivalent is your daily driver. You have measurable productivity gains to show for it and clear opinions on how to use these tools well. You have shipped at least one non-trivial AI-powered tool, agent, or automation pipeline in production using the Anthropic SDK, MCP, custom evals, or comparable. AI is a serious instrument in your security workflows. ## Nice to have - Cryptography or financial-engineering background. - Institutional finance background. Capital-markets microstructure, custody, compliance flows, RWA tokenization, settlement. - Hands-on experience with other non-EVM ecosystems. Starknet, Stellar/Soroban, Arbitrum Stylus, Aptos, Move-based chains. - Open-source contributions to widely-used libraries in the smart-contract or AI-tooling space. Logistics Our interview process is designed to be fast (we target ~30 days from first call to offer) while still giving both sides a clear "yes." The full process consists of: - Recruiter interview (30-45 minutes) - Manager interview (60 minutes) - Team interview (45 minutes) - Leadership Interview (30 minutes) - Paid technical work trial Please let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance. ## Benefits - Meet your teammates at company gatherings around the world 😎 - Enjoy the flexibility of fully remote work 🌎 - Take the time you need with flexible time off 🏝 - Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙 - Build your ideal home office with up to $500 in equipment support 🪑 - Stay covered with medical insurance 🏥 - Keep growing with learning and development opportunities 🧠 - Get a monthly stipend for your preferred co-working space 💻 At OpenZeppelin, we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us! Use of AI as part of the recruiting process As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s [Data Privacy Notice](https://www.openzeppelin.com/privacy). If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com. ## About OpenZeppelin ## Company Overview - **One-liner**: OpenZeppelin provides the security standard for onchain finance, offering smart contract libraries, security audits, and a developer security platform to help organizations build, secure, and operate blockchain applications. - **Entity Type**: Private (Venture-backed; last known funding round in 2023) - **Headquarters**: United States (distributed/remote-first company with team members across 33+ countries) - **Founded**: 2015 - **Founders**: Demian Brener ## Core Business - Primary industry/industries: Blockchain Security, Smart Contract Development, Cybersecurity, Financial Infrastructure - Target customers: B2B — DeFi protocols, blockchain platforms, financial institutions, and crypto-native organizations (e.g., Coinbase, Ethereum Foundation, Compound, Aave, Uniswap, Matter Labs, ANZ Bank) - Mission or purpose statement: "To accelerate the world’s transition to an open financial system." ## Products & Services - **[OpenZeppelin Contracts](https://www.openzeppelin.com/contracts)**: The industry-standard, battle-tested open-source library for secure smart contract development in Solidity and Cairo. Used by 9 of the top 10 stablecoins and 10 of the top 10 tokenized funds. Over $33.2 trillion in total value has been transferred via these contracts. - **[OpenZeppelin Defender](https://www.openzeppelin.com/defender)**: A developer security platform for operating onchain applications. Includes a Relayer for secure transaction management, Monitors for threat detection and alerting, and Actions for automated incident response. - **[Security Audits](https://www.openzeppelin.com/security-audits)**: Gold-standard smart contract, ZKP, and infrastructure audits. The team has uncovered 700+ critical and high vulnerabilities, with over 1 million lines of code reviewed. They pioneered the smart contract security audit practice. - **[Ethernaut CTF](https://ethernaut.openzeppelin.com/)**: The #1 educational resource for smart contract security, with +140K plays across 5 networks and 10 languages. - **Security Research & Standards**: Active contributors to Ethereum Improvement Proposals (EIPs) and ERCs, including Account Abstraction (ERC-1271), Metatransactions (ERC-2771), and Upgradeability (ERC-7201, ERC-1967). Members of EthTrust and SEAL911. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Total Value Locked (TVL) secured: over **$250 billion** across client protocols. Total value transferred via OpenZeppelin Contracts: over **$33.2 trillion**. - **Notable Investors/Partners**: Raised a Venture Round in March 2023 with 1 investor (specific lead not publicly named in available data). Clients include Coinbase, Ethereum Foundation, Compound, Aave, Uniswap, Matter Labs, and ANZ Bank. - **Growth Signals**: 95%+ customer re-engagement rate; 71 NPS score; 200+ active customers; 140+ global team members; operates in 33+ countries; 64% of all active wallets have interacted with OpenZeppelin Contracts. ## Competitive Advantages - **Market Dominance & Trust**: OpenZeppelin Contracts are the de facto standard for secure smart contract development, used by the vast majority of top DeFi protocols and tokenized funds. - **Pioneering Expertise**: As the company that pioneered the smart contract security audit practice, they have a decade of experience and unmatched depth in blockchain security research. - **Full Lifecycle Coverage**: The only company that offers an integrated stack from open-source development libraries (Contracts) to operational security (Defender) to expert auditing, covering the entire development lifecycle. - **Neutral & Research-Driven**: A neutral, strategic partner committed to customer success, with a strong research culture that contributes directly back to the ecosystem (EIPs, ERCs, educational tools like Ethernaut). - **AI-First Security**: Recently introduced AI-powered security audits alongside the release of Contracts 5.0, positioning them at the cutting edge of automated vulnerability detection. ## Strategic Focus - **AI-Native Security**: Integrating AI into security audits and the Defender platform to provide continuous, automated security across the full lifecycle, enabling capital markets to deploy and operate at scale in regulatory alignment. - **Expanding into Privacy & Confidentiality**: Entering the privacy and confidentiality space (Zero-Knowledge Proof audits and infrastructure). - **Institutional Onboarding**: Deepening partnerships with traditional financial institutions undergoing onchain transformation, helping them meet regulatory and security requirements. - **Community & Education**: Continuing to grow the Ethernaut CTF and contribute to open standards to foster a more secure ecosystem. ## Why Work Here - **Mission-Driven**: Join a team dedicated to "accelerating the world's transition to an open financial system" — a high-impact, transformative goal. - **Remote-First & Global**: Fully remote company with team members in 40+ countries. They foster connection through regular in-person gatherings in different locations worldwide. - **World-Class Team**: Work alongside globally distributed engineers, researchers, and security experts who are defining the foundations for the next generation of financial services. Alumni have gone on to top roles at companies like Chainalysis, Coinbase, Matter Labs, and Trail of Bits. - **Strong Values**: The culture is built on Intellectual Curiosity, Commitment to Excellence, Ability to Ship, Customer Centricity, Team Spirit, and a Strong Sense of Purpose. - **Benefits**: Fully remote work, flexible time off, paid parental leave for primary or secondary caregiver, one-time home office stipend of up to $500 USD, medical coverage, annual Learning & Development budget, and referral incentives. - **Hiring Process**: A transparent, 6-step process designed to be fair and thorough, including a paid work trial that emulates real work. Typically completed in up to 6 weeks. - **Growth & Impact**: With 200+ active customers and $250B+ in TVL secured, your work directly protects billions of dollars in digital assets. ## Sources 1. [openzeppelin.com](https://www.openzeppelin.com/) 2. [openzeppelin.com/about-us](https://www.openzeppelin.com/about-us) 3. [openzeppelin.com/careers](https://www.openzeppelin.com/careers) 4. [linkedin.com/company/openzeppelin](https://www.linkedin.com/company/openzeppelin) ## Other roles at OpenZeppelin - [Program Manager (Customer Success)](https://feeny.ai/job/program-manager-customer-success-openzeppelin-remote-zxpm1gz29mzk) - [Head of IT & Security](https://feeny.ai/job/head-of-it-security-openzeppelin-remote-dvmhaxb57y1g) - [Principal Security Engineer (Solana)](https://feeny.ai/job/principal-security-engineer-solana-openzeppelin-remote-x1g8qg8msj4g) - [Technical Sales Lead, Ecosystems](https://feeny.ai/job/technical-sales-lead-ecosystems-openzeppelin-remote-hs2maa1a17ma)