Blockchain Security Researcher

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Blockchain Security Researcher based in Spain.

Join a security-focused research team protecting some of the most important protocols and financial systems in the blockchain ecosystem.

You will investigate smart contracts, identify vulnerabilities, and help clients strengthen their systems before and after launch.

The role spans the full protocol lifecycle, from architecture and design reviews to deep audits and ongoing security coverage.

You will work extensively with Solidity, Ethereum, and the EVM while exploring emerging attack vectors and novel blockchain technologies.

AI will be a central part of your workflow, helping you expand audit coverage, analyze complex systems, and develop more efficient security processes.

You will also have opportunities to conduct independent research, develop security tooling, and contribute knowledge to the broader ecosystem.

This is an opportunity to combine practical security engineering, blockchain research, and collaborative problem-solving in a highly technical environment.

Accountabilities:

• Review smart contracts for decentralized applications, blockchain infrastructure, and financial institutions, identifying vulnerabilities, assessing their severity, and clearly presenting findings to clients.
• Lead security audits independently from planning through final delivery, using AI as a primary collaborator and partnering with other researchers when additional attack perspectives are valuable.
• Participate in protocol design reviews, analyzing architecture, trust assumptions, security models, and operational constraints before implementation begins.
• Collaborate directly with protocol engineering teams on co-creative engagements involving research, mechanism design, specification, and smart contract development.
• Design and develop smart contracts as part of research and client engagements, applying strong security and engineering principles throughout the development lifecycle.
• Integrate AI effectively into audit workflows and develop reusable skills, agents, prompts, scripts, and processes that improve team productivity and security coverage.
• Conduct open-ended research into emerging blockchain technologies, vulnerability classes, attack vectors, and novel security mechanisms.
• Document research findings and contribute insights to internal security knowledge bases and the broader blockchain security ecosystem.
• Work closely with clients and fellow researchers to communicate technical risks, security recommendations, and complex findings clearly and effectively.

Requirements:

• Hands-on practical experience in one or more relevant areas, including software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics, game theory, or DeFi mechanisms.
• Proven experience designing and developing smart contracts, in addition to auditing or reviewing them.
• Strong working knowledge of Solidity and the Ethereum/EVM ecosystem, including common libraries, frameworks, and smart contract design patterns.
• Extensive experience using modern AI tooling as part of daily technical work to expand audit coverage, reason through complex systems, and accelerate high-quality security analysis.
• Ability to critically evaluate AI-generated code and outputs rather than relying on them without technical validation.
• Experience building and extending personal or team tooling, including AI skills, agents, prompts, scripts, or complete security workflows.
• Advanced English proficiency with strong written and verbal communication skills.
• Experience with non-EVM ecosystems or blockchain technologies such as Canton, Move, Cosmos SDK/Golang, Cairo, Rust-based blockchains, or zero-knowledge circuits is a plus.
• Experience with crypto risk assessment, smart contract risk analysis, or threat modeling is highly desirable.
• Web2 security experience in areas such as penetration testing, web application security, infrastructure security, or application security is an advantage.
• Knowledge of formal verification, invariant testing, or advanced fuzzing tools such as Echidna, Foundry, Halmos, or Certora is beneficial.
• Experience participating in audit contests or bug bounty platforms, including Code4rena, Sherlock, Cantina, Immunefi, or HackerOne, is a plus.
• A track record of publicly sharing security research through published findings, technical articles, conference presentations, or open-source security tooling is advantageous.

Benefits:

• Fully remote work environment with flexibility across locations.
• Opportunities to meet teammates through company gatherings around the world.
• Flexible time off to support sustainable work and personal needs.
• 8 weeks of paid leave for primary caregivers.
• 4 weeks of paid leave for secondary caregivers.
• One-time $3,600 baby bonus.
• Up to $500 in equipment support to build an ideal home office.
• Medical insurance coverage.
• Learning and development opportunities to support continued professional growth.
• Monthly stipend for a preferred co-working space.