Senior dApp Security Auditor

• 5+ years of experience in dApp security, pen-testing, or related fields, preferably in a consultancy environment.
• Extensive knowledge of blockchain technologies, programming languages for dApp development, and security frameworks.
• Demonstrated ability to lead security audits and provide expert recommendations to clients.
• Strong communication and interpersonal skills, with a proven ability to engage effectively with both technical and non-technical stakeholders.
• Commitment to continuous learning and staying ahead of emerging trends in the web3 space.
• Experience with mobile application penetration testing.
• Familiarity with DevSecOps principles and practices.

• Perform detailed security audits of decentralized applications for clients, identifying vulnerabilities, risks, and compliance gaps.
• Utilize penetration testing techniques to simulate potential attacks and assess the resilience of dApps against security breaches.
• Collaborate closely with clients to understand their specific needs and tailor security strategies accordingly.
• Assess dapps codebase, logic, and architecture to ensure compliance with industry standards and best practices.
• Develop and implement automated tools to streamline the auditing process, delivering efficient and consistent results.
• Create comprehensive reports outlining the findings, vulnerabilities, and recommended remediation strategies for technical and non-technical audiences, including management and IT staff.
• Keep abreast of emerging threats and trends in dApp security, contributing proactively to the organization's security strategies.
• Perform Threat Modeling by conducting systematic threat modeling exercises for clients' dApp ecosystems, identifying potential risk factors, and recommending specific countermeasures.

It would be a plus:

• Relevant security certifications such as Offensive Security Certified Professional (OSCP), or GIAC Web Application Penetration Tester (GWAPT) are preferred.
• Experience with DeFi projects, Red Teams, or other specialized security roles.
• Contributions to the security community (e.g., published articles, open-source projects, presented at security conferences).

• Opportunity to influence and feel your impact inside the company;
• Work in a progressive and cutting-edge environment;
• Great opportunities for personal and career growth;
• Paid vacation and sick leaves;
• Minimum bureaucracy, maximum independence;
• Budget for conferences, seminars, certifications, and training that will help you grow as a professional;
• Flexible working hours;
• Remote work.