{"id":167948,"url":"https://alion.io/job/openzeppelin-blockchain-security-researcher-future-openings","title":"Blockchain Security Researcher","company":{"id":47514,"name":"OpenZeppelin","domain":"openzeppelin.com","url":"https://alion.io/company/openzeppelin","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"worldwide","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DeFi","optional":false},{"name":"Ethereum","optional":false},{"name":"OpenZeppelin","optional":false},{"name":"OpenZeppelin Cairo","optional":false},{"name":"Smart Contracts","optional":false},{"name":"Solidity","optional":false},{"name":"Aave","optional":true},{"name":"Aptos","optional":true},{"name":"Cairo","optional":true},{"name":"Certora","optional":true},{"name":"Cosmos","optional":true},{"name":"Cosmos SDK","optional":true},{"name":"Echidna","optional":true},{"name":"Foundry","optional":true},{"name":"Go","optional":true},{"name":"Halmos","optional":true},{"name":"Move","optional":true},{"name":"Rust","optional":true},{"name":"Solana","optional":true},{"name":"Starknet","optional":true},{"name":"Stellar","optional":true},{"name":"Sui","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Uniswap","optional":true}],"status":"live","first_seen_at":"2021-01-06T00:45:39Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-18T20:52:31Z","board_verified":true,"closed_at":null,"days_open":2111,"trust":{"level":"stale","repost_count":1,"flags":["stale"],"days_open":2111},"description":"About us\nOpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research.\nOur open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap.\nWe combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle.\nPlease note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information.\nThe Security Services Team\nOpenZeppelin's Security Services team is responsible for the security of the world's leading web3 protocols and top financial institutions building onchain. Our researchers partner with client teams across the full lifecycle of a protocol: working on architecture and design before any code is written, co-creating novel mechanisms and primitives with engineering teams, conducting deep audits of pre-launch codebases, and providing continuous coverage as production systems evolve. Our clients range from emerging projects shipping their first contracts to global financial institutions running production onchain systems at scale.\nWhat you'll be doing\nReview smart contracts for top decentralized applications, blockchain infrastructure and financial institutions before they launch. Find vulnerabilities, prioritize them, and present findings to the client.\nDrive audits independently from start to finish, with AI as your primary collaborator. When useful, partner with another researcher to attack the code together and pressure-test findings.\nPartner with client teams during the design phase of new protocols, analyzing architecture, trust assumptions, and operational constraints before any code is written (Design Reviews, Applied Research engagements).\nUse AI efficiently throughout the audit process, and build skills, agents, and workflows that compound across the team.\nConduct open-ended research into cutting-edge blockchain technologies, vulnerability classes, and emerging attack vectors, and contribute findings back to OpenZeppelin's internal knowledge base and to the broader ecosystem.\nYou have\nHands-on and practical experience in one or more of the following: software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics or game theory, or DeFi mechanisms.\nExperience designing and developing smart contracts, not only auditing them.\nStrong working knowledge of Solidity and the broader Ethereum / EVM ecosystem (common libraries, frameworks, smart contract patterns).\nModern AI tooling is central to how you work, not a novelty. You use it daily to expand audit coverage, reason about complex systems, and produce high-quality outputs faster. You evaluate AI-generated code with a critical eye.\nComfort building and extending your own tooling (skills, agents, prompts, scripts, or full workflows) that the rest of the team can adopt and build on.\nAn advanced English level and strong communication skills (oral and written).\nNice to have\nExperience with non-EVM ecosystems and languages, such as Canton, Move (Sui, Aptos), Golang (Cosmos SDK), Cairo (Starknet), Rust-based blockchains (Solana, Stellar), or ZK circuits and cryptography-heavy systems.\nExperience with risk assessment work in the crypto industry (smart contract risk assessment, threat modeling).\nWorking hand-in-hand with protocol teams on co-creative engagements, helping design, specify, and implement smart contracts alongside the research.\nWeb2 security expertise (penetration testing, web application security, infrastructure security, or appsec).\nExperience with formal verification, invariant testing, or advanced fuzzing tools (Echidna, Foundry, Halmos, Certora).\nA track record in audit contests (Code4rena, Sherlock, Cantina) or bug bounty platforms (Immunefi, HackerOne).\nPublic security research output, such as published findings, blog posts, conference talks, or contributions to open-source security tooling.\nLogistics\nOur interview process takes place on Google Meet and tends to consist of the following stages:\nRecruiter call (30 minutes)\n\nManager interview (60 minutes)\n\nTechnical interview (60 minutes)\n\nPaid work trial (paid code review assessment)\n\nReference checks\n\nPlease let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance.\nBenefits\nMeet your teammates at company gatherings around the world \nEnjoy the flexibility of fully remote work \nTake the time you need with flexible time off \nGrow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus \nBuild your ideal home office with up to $500 in equipment support \nStay covered with medical insurance \nKeep growing with learning and development opportunities \nGet a monthly stipend for your preferred co-working space \nAt OpenZeppelin, we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us!\nUse of AI as part of the recruiting process\nAs part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s Data Privacy Notice.\nIf you have questions about this recruitment process or would like to request human review of your application, please contact us at .","description_format":"text","description_chars":6412,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible time off","Health insurance","Home office"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Financial Services","Smart Contracts & Security","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2021-01-06T00:45:39Z"},{"event":"close","at":"2026-09-09T18:21:21Z"},{"event":"reopen","at":"2026-09-30T00:10:15Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.161,"p_room":0.28,"age_days":2110,"expected_fill_days":27,"reasons":["conf:0","win:tail","crowd:remote"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/openzeppelin-blockchain-security-researcher-future-openings","json_url":"https://alion.io/job/openzeppelin-blockchain-security-researcher-future-openings.json","meta":{"generated_at":"2026-10-18T23:27:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25907,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47514},"rest":"https://alion.io/mcp/rest/get_company?id=47514"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopenzeppelin-blockchain-security-researcher-future-openings"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopenzeppelin-blockchain-security-researcher-future-openings"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopenzeppelin-blockchain-security-researcher-future-openings"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/openzeppelin-blockchain-security-researcher-future-openings\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopenzeppelin-blockchain-security-researcher-future-openings"}]}