{"id":114821,"url":"https://alion.io/job/certik-sr-security-engineer-penetration-testing","title":"Sr. Security Engineer (Penetration Testing)","company":{"id":515,"name":"CertiK","domain":"certik.com","url":"https://alion.io/company/certik","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":67,"open_postings":29,"ghost_share":0.552,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":216000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DeFi","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"Smart Contracts","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2022-01-12T22:38:14Z","employer_posted_date":"2022-01-12","last_verified_at":"2026-10-16T12:14:50Z","board_verified":true,"closed_at":null,"days_open":1737,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":1737},"description":"Why Us?\nCertiK is a pioneer in blockchain security, leveraging best-in-class AI technology to protect and monitor blockchain protocols and smart contracts. Founded in 2018 by professors from Yale University and Columbia University, CertiK’s mission is to secure the web3 world. CertiK applies cutting-edge innovations from academia to enterprise, enabling mission-critical applications to scale with safety and correctness.\nAbout the Role\nThe primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.\nResponsibilities\nPerform security assessments on web, mobile, thick client applications, and browser extensions\nConduct external and internal network penetration tests\nPerform security source code reviews\nPerform cloud security reviews\nDevelop comprehensive pentest reports for both technical and non-technical audiences\nResearch and develop innovative techniques, tools, and methodologies for pentesting applications in the blockchain space \nContribute to the community by developing tools, presentations, and blog posts\nRequirements\nPassionate about cryptocurrency, DeFi, and blockchain, with a willingness to learn Web3 technologies such as smart contracts\nMinimum of 4 years of experience in application security and penetration testing\nExperienced in source code review for different languages, with a strong understanding of JavaScript and TypeScript\nExperienced in mobile application penetration testing\nFamiliar with cloud platforms and their security risks, such as AWS, Azure, and GCP\nExperience in programming with scripting languages such as Python and Bash\nSolid understanding of cryptography\nBS/MS/PhD in Computer Science or Information Security \nStrong spoken and written communication skills\nBonus Points\nExperienced in pentesting Web3 applications such as crypto exchanges, wallets, Dapps, and key custodian solutions \nExperienced in smart contract security audits\nFamiliar with browser extension architecture and security risks\nActively participate in the blockchain security community\nOSCP, OSWE, OSCE, GWAPT, or comparable certification\nParticipated in bug bounty programs and audit contests\nPublished security-related blog posts and spoken at security conferences and/or local meetups","description_format":"text","description_chars":2978,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2022-01-12T22:38:14Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.244,"p_room":0.28,"age_days":1737,"expected_fill_days":40,"reasons":["conf:2","stale_co","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/certik-sr-security-engineer-penetration-testing","json_url":"https://alion.io/job/certik-sr-security-engineer-penetration-testing.json","meta":{"generated_at":"2026-10-16T13:33:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13019,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":515},"rest":"https://alion.io/mcp/rest/get_company?id=515"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcertik-sr-security-engineer-penetration-testing"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcertik-sr-security-engineer-penetration-testing"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcertik-sr-security-engineer-penetration-testing"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/certik-sr-security-engineer-penetration-testing\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcertik-sr-security-engineer-penetration-testing"}]}