(Solana) Offensive Security Engineer - 100% Remote, Blockchain, DeFi

Castleisland; Remote; GBP 70,000 - 100,000; Full time

Job summary

A leading cybersecurity company in the United Kingdom seeks an experienced Offensive Security Expert to conduct adversary simulations and research in the cryptocurrency sector. Candidates should have over 5 years of offensive security experience, audit DeFi protocols, and possess scripting proficiency. This role offers an opportunity to impact cutting-edge security challenges in the crypto space.

Qualifications

• 5+ years of offensive security experience.
• 2+ years of experience auditing DeFi protocols.
• Proficient in at least one scripting language.

Responsibilities

• Conduct realistic adversary simulations and testing.
• Research cutting-edge offensive security techniques.
• Communicate risks and required remediations.

Skills

Offensive security experience

Smart contract audits

Critical thinking

Communication skills

Penetration testing tools

Scripting language proficiency

Tools

BurpSuite

Metasploit

Job description

About Halborn Inc

Our mission is to provide value-add security services and products to the world’s most cutting edge technology firms and that starts with blockchain tech. Founded in 2019, Halborn is an elite cyber security company focused on solving complex adversarial problems unique to the cryptocurrency and fintech industries. From breaches and social engineering to stolen private keys and economic hacks, Halborn solves it. Our clientele are the exclusive blockchain companies as well as new startups with high growth trajectories.

Our Culture

Halborn is a globally distributed team of 100+, looking to grow our elite team of white hat hackers, sales professionals, security engineers and DevSecOps specialists who value independence, want to make their own hours, work for themselves and have a passion for the ever evolving cryptocurrency industry.

Our Commitment to Diversity

Halborn Inc is an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, education, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics and celebrates the diversity of its growing team.

We are unable to sponsor or take over sponsorship of employment Visas at this time.

Recruitment agencies and consultants may not submit resumes/CVs through this website or directly to managers. Halborn does not accept unsolicited agency resumes, and will not pay fees to any third-party agency or company that does not have a signed agreement with Halborn Inc.

Responsibilities

• Conduct realistic adversary simulations from conception through reporting. Perform testing systems, applications, networks and processes.
• Research cutting-edge offensive security techniques.
• Developing tools and exploits.
• Communicate clearly and effectively, both written and orally, the risks that exist and remediations required.
• Work collaboratively and independently on unique or special assignments which may require specialized knowledge and/or experience.
• Comply with Company, Division and Professional ethical standards.

Requirements

• A passion for the cryptocurrency industry.
• Experience in smart contract audits (suggested).
• 5+ years of offensive security experience.
• 2+ years of experience auditing DeFi protocols (Solidity, Solana or any Rust-based protocol).
• Experience using common penetration testing tools, BurpSuite, Metasploit, etc.
• Proficient in at least 1 scripting language.
• Proficiency with common server and workstation operating systems.
• Mastery in testing modern web application languages and frameworks.
• Mastery in testing modern authentication systems and Identity Providers.
• Proficient knowledge of blockchain and smart contract implementations.
• Ability to think critically and identify areas of technical and non-technical risk.
• Ability to write technical reports and communicate technical content to non-technical audiences.
• Relevant security certifications are a plus, but not required (OSCP, OSCE, GPEN, GWAPT, LPT, CISSP).

All candidates who make it past 2nd round will be required to:

• Pass background and criminal record check
• Provide x3 relevant references