Security Researcher
Spearbit
Posted: July 4, 2025
Interested in this position?
Create a free account to apply with AI-powered matching
Quick Summary
Perform deep-dive security reviews of smart contracts, protocols, and blockchain infrastructure, identifying attack surfaces and providing actionable recommendations with clear technical and business impact assessments.
Required Skills
Job Description
What You’ll Do
• Perform deep-dive security reviews of smart contracts, protocols, and blockchain infrastructure
• Analyze protocol designs and identify attack surfaces across DeFi primitives, tokenomics, governance, MEV, bridges, and ZK systems
• Work within a pod or as part of a curated team with other senior researchers
• Provide actionable recommendations with clear technical and business impact assessments
• Reproduce exploits, write POCs, and occasionally contribute patches
• Publish post-mortems, technical articles, and internal reports as part of the knowledge-sharing culture
Who You Are
• Experienced: You've worked on or audited complex smart contracts and are deeply familiar with Solidity, EVM behaviour, and common vulnerability classes (e.g., reentrancy, logic flaws, gas griefing, access control). Bonus if you have exposure to Move, Zk, Cairo, Rust, or low-level protocol implementations.
• Curious and Relentless: You don’t stop at surface-level bugs. You model systems end-to-end and attack assumptions from first principles.
• Collaborative: You enjoy working with other security researchers and protocol developers to ship secure products.
• Detail-Oriented: You produce clear, concise, and rigorous technical writeups. Your GitHub issues or findings are actionable and professional.
• Credible: You’ve either contributed to open source projects, published security research, performed audits, played CTFs, or made a name for yourself in the bug bounty world.
• Decentralization-Aligned: You value open networks, cryptographic innovation, and building resilient systems.
Preferred Qualifications
• Deep understanding of the EVM and Solidity
• Experience auditing production smart contracts (solo or in teams)
• Experience with cross-chain protocols, bridging, rollups, or ZK systems
• Track record of high-impact bugs in bounties, audits, or competitions (e.g., Cantina, Paradigm CTF)
• Familiarity with Ethereum security tooling: Foundry, Echidna, Slither, etc.
• Experience writing or reviewing technical specs or protocol docs
Nice to Haves
• Prior experience in formal audits (Spearbit, Zellic, Trail of Bits, etc.)
• Familiar with the Cantina Platform
• Lead reviewer experience or ability to manage a team of researchers
• Contributions to open-source security tooling
• Security publications, conference talks, or technical blog posts
What We Offer
• Access to cutting-edge projects and deeply technical reviews
• Compensation at the top end of the market
• Collaboration with the best researchers + projects in the industry