Responsibilities

Perform a review analysis on newly disclosed vulnerabilities for smart contracts and summarize the root cause behind the exploits for early detection in the future
Conduct security audits on both smart contracts and blockchains, and write high-quality audit reports
Develop automated scanning and monitoring tools for smart contracts and blockchains
Utilize scanning tools to detect vulnerabilities in online contracts and promptly issue risk warnings
Conduct post-mortem analyses on various hacking incidents, examining the causes, processes, and basic fund tracing
Proactively identify on-chain risks, monitor and model emerging on-chain attack vector trends, and possess a solid understanding of on-chain security risks such as fraud and phishing
Demonstrate a strong understanding of EVM-compatible blockchains and layer 2 solutions, and be familiar with DeFi design patterns

Requirements

Currently enrolled or holding a bachelor's degree (or higher) in Computer Science or a related field
Proficient in Smart Contract programming languages, such as Solidity, among others
Basic understanding of common Smart Contract security vulnerabilities
Basic understanding of blockchain and smart contract principles, experienced with reading Blockchain explorers. Well versed with the different types of hacks on smart contracts, and its common attack vectors
Well versed with the different types of scams such as Wallet Drainers in the space and how to identify them
Familiar with smart contract development testing, transaction analysis, and other tools
Experienced in using VSCode, Git, or other version control applications
Proficient in Python or another object-oriented programming language
Fundamental knowledge of code analysis and program debugging

Additional beneficial skills

Passionate about digital assets / DeFi / smart contract / blockchain
Basic knowledge of fuzz testing or static analysis
Basic knowledge of detection, exploitation, and prevention of security vulnerabilities
Experience in smart contracts development (e.g Foundry, HardHat, etc.)
Experience in CTF or bug bounty programs (e.g. Hack The Box, WebGoat, etc.)
Experience in Front-end development (React, Javascript, Typescript)
Experience in data mining and data analysis of on-chain data
Have great interest in our company, high work enthusiasm and responsibility, good and humble work attitude

Smart Contract Security Engineer