Security Auditor - Diligence

Consensys is the leading blockchain and web3 software company founded by Joe Lubin, CEO of Consensys and Co-Founder of Ethereum. Since 2014, Consensys has been at the forefront of innovation, pioneering technological developments within the web3 ecosystem.

Through our product suite, including the MetaMask platform, Infura, Linea, Diligence, and our NFT toolkit Phosphor, we have become the trusted collaborator for users, creators, and developers on their path to build and belong in the world they want to see.

Whether building a dapp, an NFT collection, a portfolio, or a better future, the instinct to build is universal. Consensys inspires and champions the builder instinct in everyone by making web3 universally easy to use and develop on.

Our mission is to unlock the collaborative power of communities by making the decentralized web universally easy to access, use, and build on. 

You’ll get to work on the tools, infrastructure, and apps that scale these platforms to onboard one billion participants and 5 million developers. You’ll be constantly exposed to new concepts, ideas, and frameworks from your peers, and as you work on different projects — challenging you to stay at the top of your game. You’ll join a network of builders that reaches the edge of our ecosystem. Consensys alumni have moved on to become tech entrepreneurs, CEOs, and team leads at tech companies. 

About Diligence 

Consensys Diligence helps developers and smart contract architects to build more secure blockchain and smart contract applications. Our full remote team, distributed all over the world, is supporting the high demand for smart contract audits in the ever growing ecosystem. We are proud to help a fast growing list of clients, including major financial institutions, corporates and crypto / DeFi native companies such as Aave, 0x, Balancer, Uniswap, Status and many more. Our aim is to make blockchain safer.

We are the creators of the MythX security analysis service, the Scribble runtime verification tool for Ethereum smart contracts, and we are leading standard setting industry references and tools, including: SWC Registry, Smart Contract Best Practices, and Blockchain Security Database, Legions (Ethereum/EVM Node Security Toolkit), Solidity Visual Developer VScode extension, and many more.

 

About the role

We are looking for passionate smart contract security researchers or developers.

Candidates should have a strong understanding of security primitives and be up-to-date with current exploits. Awareness of the current DeFi landscape is a big plus, and experience with exploitation techniques of financial protocols is a valued skill. You should also be aware of how the EVM works, and the idiosyncrasies which can lead to vulnerabilities when developers don’t properly understand them. You will have the opportunity to work with and learn from some of the brightest minds in the space, to see how we approach hacking, threat modelling, scanning, auditing, designing and enhancing the security of smart contracts across the board. 

Alongside client work, we also provide you with plenty of time for research and development efforts where you can push the state of the art and science of blockchain security.

Most of the work can be done remotely from wherever you are; little travel is anticipated (most of the team works remotely around the world).  Along with a focus on technical excellence, we also believe firmly that culture and processes play an essential role in security. 

We are looking for exceptionally intellectual, bright and technically driven individuals who can communicate their ideas clearly while working with clients to achieve their security objectives. 

 

Qualifications

• Experience developing and building on top of DeFi protocols or other smart contracts
• Experience describing or assessing smart contract specific security risks
• Demonstrated expertise with Solidity, the EVM, and blockchain
• Demonstrated ability to work well with clients, and communicate clearly and concisely in a written format

Nice to haves

• A portfolio of blog posts or presentations on DeFi or security related topics
• Experience working in the Financial sector or as a financial analyst
• Publicly visible audit reports in your portfolio
• BS degree or higher in a relevant field or equivalent practical experience
• Experience building tooling in javascript, typescript or python

 

The salary range for US-based candidates only will be determined throughout the interview process depending on experience and skills.

US pay range (not including bonus, equity or other benefits)$85,000—$150,000 USDSELECT BELOW$1—$1 USD

 

In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At Consensys, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities with economic and political agency through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3.

Consensys is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. Consensys is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself which can be found (https://consensys.io/careers/best-practices-to-avoid-recruitment-fraud/).