Security Analyst
Veridise
Global
fulltime
Posted 2 days ago
Job Description
Security Analyst
We are seeking a highly skilled and motivated security analyst. The ideal candidate will have a strong background in computer science, possess advanced technical expertise, and demonstrate a deep understanding of security principles. This role involves identifying and mitigating security vulnerabilities through manual code review, running cutting-edge security tools and analyzing their results, actively staying up-to-date on emerging security threats, and learning to audit in new and exciting technologies.
About Veridise
Veridise is a blockchain security company founded in 2022 by academics focused on bringing increased automation to the security landscape.
Veridise performs security audits for smart contracts, zero-knowledge circuits, blockchain implementations, key management services, and other off-chain services like relayers, bridges, wallet integrations, and more. Additionally, many members of the Veridise team research and develop modern security tools designed to tackle the ever-changing landscape of blockchain development, providing novel and automated insights into the security of smart contracts and zero-knowledge circuits.
With these two hybrid approaches, Veridise combines the theory and expertise of the programming languages research community with the persistence and insight of professional security analysts.
Key Responsibilities
- Work closely with Veridise audit teams to perform security assessments and analyze potential vulnerabilities.
- Document findings and present recommendations for improvements.
- Meet and communicate with clients to convey progress and share security issues.
- Stay current with the latest trends in security, cryptography, and malware.
- Write blogs, present at conferences, and help guide our tool-design teams with feedback and ideas for new automations.
Qualifications
- Bachelor’s degree or higher in Computer Science or related field, or 3+ years of experience in the security industry.
- Proficiency in at least one of the following programming languages: Rust, Solidity, C/C++, Go, or similar.
- Experience with source code security reviews, penetration testing, or reverse engineering. Experience in information security, data compliance, or network monitoring is not necessary for this role.
- Familiarity with security frameworks and standards (e.g., OWASP, NIST, ISO).
- Deep understanding of security concepts, threat models, and secure software development.
- Excellent problem-solving skills, sharp attention to detail, strong ethics, and a desire to prove correctness to yourself.
- Effective communication skills for both technical and non-technical audiences.
Preferred
- Master’s or PhD with a specialization in security or related field.
- 2-4 years of professional experience in security analysis, research, or related roles.
- Cryptography. Experience or education in designing, breaking, or securely implementing cryptographic primitives and protocols. A math background paired with practical expertise is a great fit.
- Bugs in the Wild. Experience exploiting and breaking native, web, or blockchain applications with techniques like kernel exploitation, logical error manipulation, sandbox escapes, or other classes of attacks. Previous bug bounty reports are always welcome.
- Malware and Tooling. Experience in reverse engineering, formal methods/software security tools (fuzzing, automated testing, static analysis, SMT-solving, formal verification).
Benefits of Working at Veridise
- Help guide internal research teams and participate in continuing education on security and blockchain topics.
- Work with top-tier teams to secure cutting edge projects and technologies.
- Opportunity for yearly bonuses.
- Fully remote work.
Required Skills
CC++GoLangProblem SolvingRustSolidityCommunicationAttention to Detail
About the Company
Veridise
Blockchain Services
11 - 50 Founded 2022
Veridise is a blockchain security company founded by a team of world-class researchers.
We specialize in auditing smart contracts and blockchain implementations and possess particular expertise in zero-knowledge-related audits.
We have also developed in-house program analysis and security tools, built using our cutting-edge research on automated program analysis, fuzzing, and formal verification.
We've earned the trust of clients such as the Manta Network, Succinct, Semaphore, Circom-lib, Scroll, and Ribbon Finance.
We specialize in auditing smart contracts and blockchain implementations and possess particular expertise in zero-knowledge-related audits.
We have also developed in-house program analysis and security tools, built using our cutting-edge research on automated program analysis, fuzzing, and formal verification.
We've earned the trust of clients such as the Manta Network, Succinct, Semaphore, Circom-lib, Scroll, and Ribbon Finance.
Apply for this job
Applications close soon
Company
Veridise
Blockchain Services
Check Job Fit
Use AI to analyze how well your resume matches this job