(Solana) Offensive Security Engineer - 100% Remote, Blockchain, DeFi

Halborn; Remote; GBP 80,000 - 100,000; Full time

Job summary

Join a forward-thinking company as an Offensive Security Engineer, where your passion for the cryptocurrency industry will thrive. In this fully remote role, you will engage in cutting-edge security practices, conducting adversary simulations and testing systems to protect innovative blockchain technologies. Collaborate with a diverse team of experts, utilizing your skills in penetration testing and smart contract audits to tackle complex challenges. This is a unique opportunity to contribute to a mission-driven organization that values independence and creativity in the rapidly evolving fintech landscape. If you're ready to make a significant impact, this role is for you!

Qualifications

• 5+ years of offensive security experience required.
• Experience in auditing DeFi protocols and smart contracts is suggested.

Responsibilities

• Conduct adversary simulations and perform testing of systems and applications.
• Research and develop tools and exploits for offensive security.

Skills

Offensive Security

Smart Contract Audits

Penetration Testing

Scripting Languages

Blockchain Knowledge

Critical Thinking

Technical Reporting

Education

Relevant Security Certifications (OSCP, OSCE, etc.)

Tools

BurpSuite

Metasploit

Job description

(Solana) Offensive Security Engineer - 100% Remote, Blockchain, DeFi

About Halborn Inc

Our mission is to provide value-add security services and products to the world’s most cutting edge technology firms and that starts with blockchain tech. Founded in 2019, Halborn is an elite cyber security company focused on solving complex adversarial problems unique to the cryptocurrency and fintech industries. From breaches and social engineering to stolen private keys and economic hacks, Halborn solves it. Our clientele are the exclusive blockchain companies as well as new startups with high growth trajectories.

Our Culture

Halborn is a globally distributed team of 100+, looking to grow our elite team of white hat hackers, sales professionals, security engineers and DevSecOps specialists who value independence, want to make their own hours, work for themselves and have a passion for the ever evolving cryptocurrency industry.

Our Commitment to Diversity

Halborn Inc is an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, education, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics and celebrates the diversity of its growing team.

We are unable to sponsor or take over sponsorship of employment Visas at this time.

Recruitment agencies and consultants may not submit resumes/CVs through this website or directly to managers. Halborn does not accept unsolicited agency resumes, and will not pay fees to any third-party agency or company that does not have a signed agreement with Halborn Inc.

Responsibilities

• Conduct realistic adversary simulations from conception through reporting.
• Perform testing of systems, applications, networks, and processes.
• Research cutting-edge offensive security techniques.
• Develop tools and exploits.
• Communicate clearly and effectively, both written and orally, the risks that exist and remediations required.
• Work collaboratively and independently on unique or special assignments which may require specialized knowledge and/or experience.
• Comply with Company, Division and Professional ethical standards.

Requirements

• A passion for the cryptocurrency industry.
• Experience in smart contract audits (suggested).
• 5+ years of offensive security experience.
• 2+ years of experience auditing DeFi protocols (Solidity, Solana or any Rust-based protocol).
• Experience using common penetration testing tools, BurpSuite, Metasploit, etc.
• Proficient in at least 1 scripting language.
• Proficiency with common server and workstation operating systems.
• Mastery in testing modern web application languages and frameworks.
• Mastery in testing modern authentication systems and Identity Providers.
• Proficient knowledge of blockchain and smart contract implementations.
• Ability to think critically and identify areas of technical and non-technical risk.
• Ability to write technical reports and communicate technical content to non-technical audiences.
• Relevant security certifications are a plus, but not required (OSCP, OSCE, GPEN, GWAPT, LPT, CISSP).

All candidates who make it past 2nd round will be required to:

• Pass background and criminal record check.