INACTIVE

Full-Time

Auditing Engineer II

Full Time, Anywhere

Posted on 6/27/2024

Quantstamp

51-200 employees

Provides security audits for smart contracts

Cybersecurity

Crypto & Web3

Junior, Mid

Remote in USA

This job is fully remote - work from anywhere in the world!

Category

Cybersecurity

IT & Security

Required Skills

Communications

Requirements

Background in Computer Science or any related field such as Mathematics or Physics.
Loves to find bugs in software systems and has a great eye for detail.
Fluent in English communication, both written and spoken.
Fluent in reading medium complexity (at least 1 KLOC) Solidity smart contracts.
Hands-on experience with static analysis tools.
Understand the most common security pitfalls with Solidity smart contracts, including economic exploits.
Understand how Ethereum works.

Responsibilities

Perform code reviews/audits of blockchain projects in small teams of engineers.
Interact with other team members to discuss the likelihood and impact of findings.
Write and review audit reports before they are shared with the customer.
Interact with customers to clarify technical requirements and answer technical questions.

As a smart contract auditor, you will be at the forefront of Web3, using a hacker mindset to identify vulnerabilities in target contracts of mainstream projects, from token contracts to full-fledged DeFi protocols. Come and join us in our mission of securing the blockchain!

This position is for candidates who already have some understanding of how Ethereum works, know how to code smart contracts, and are aware of the main security caveats and how to identify them. To succeed as an Auditing Engineer II, you must demonstrate the ability to read and write code, have an understanding of common security vulnerabilities in DApps, and analyze architectural trade-offs.

This job is fully remote - work from anywhere in the world!

Candidate Profile

Background in Computer Science or any related field such as Mathematics or Physics.
Loves to find bugs in software systems and has a great eye for detail.
Fluent in English communication, both written and spoken.
Fluent in reading medium complexity (at least 1 KLOC) Solidity smart contracts.
Hands-on experience with static analysis tools.
Understand the most common security pitfalls with Solidity smart contracts, including economic exploits.
Understand how Ethereum works.

Nice to Have

Hands-on experience with blockchain projects.
Reading fluency in Rust.
Hands-on experience with fuzzing tools.
Pentesting skills and knowledge of traditional Web2 security.
Partial availability (2-6h) during EST work hours to allow for communication with the team.

Responsibilities

Perform code reviews/audits of blockchain projects in small teams of engineers.
Interact with other team members to discuss the likelihood and impact of findings.
Write and review audit reports before they are shared with the customer.
Interact with customers to clarify technical requirements and answer technical questions.

Optional Opportunities

Perform research on a new topic in the crypto space and provide internal “Lunch and Learn” (LnL) sessions. There is an option to also record and publish LnLs on YouTube or other social media platforms.
Work on internal research projects, building PoCs, forking and changing open-source tools, running experiments, etc.

Quantstamp

View Company Profile

Quantstamp specializes in security audits for smart contracts in the blockchain and cryptocurrency market. They use a decentralized network of security nodes to conduct thorough audits, identifying and fixing vulnerabilities in smart contracts efficiently. With over 600 audits completed and more than $200 billion in digital assets secured, Quantstamp serves a wide range of clients, including blockchain projects and DeFi protocols. Their goal is to protect digital assets and ensure the integrity of smart contracts.

Company Stage

Private

Total Funding

$5.3M

Headquarters

San Francisco, California

Founded

2017

Growth & Insights

Headcount

6 month growth

↓ -8%

1 year growth

↓ -21%

2 year growth

↑ 4%

Simplify's Take

What believers are saying

Quantstamp's partnership with Klaytn and the launch of DeFi Protection highlight their commitment to innovation and expanding their service offerings.
Their reputation for high-quality security services attracts prominent clients, enhancing career growth opportunities and professional development.
The company's decentralized approach and comprehensive audit process ensure a dynamic and cutting-edge work environment.

What critics are saying

The rapidly evolving blockchain and cryptocurrency market requires constant adaptation, posing a challenge to maintaining a competitive edge.
Dependence on the decentralized network of security nodes could lead to potential vulnerabilities and operational inefficiencies.

What makes Quantstamp unique

Quantstamp's decentralized network of security nodes ensures fast, affordable, and reliable security scans, setting it apart from centralized competitors.
Their extensive experience with over 600 audits and securing more than $200 billion in digital assets underscores their expertise and reliability in the blockchain security market.
Quantstamp's dual revenue stream from audit fees and mining fees provides a scalable and sustainable business model, unlike competitors relying on a single revenue source.

Help us improve and share your feedback! Did you find this helpful?

INACTIVE