Smart Contract Security Engineer (Security Audit)

Binance

You will work hand-in-hand with various talented workers from Binance on the cutting-edge of crypto to guard safety across many projects and systems. You will also coordinate with other teams aside from the security group, which could provide you an in-depth understanding of the crypto world.

Responsibilities

• Perform a review analysis on newly disclosed vulnerabilities for smart contracts and summarize the root cause behind the exploits for early detection in the future
• Conduct security audits on both smart contracts and blockchains, and write high-quality audit reports
• Develop automated scanning and monitoring tools for smart contracts and blockchains
• Utilize scanning tools to detect vulnerabilities in online contracts and promptly issue risk warnings
• Conduct post-mortem analyses on various hacking incidents, examining the causes, processes, and basic fund tracing
• Proactively identify on-chain risks, monitor and model emerging on-chain attack vector trends, and possess a solid understanding of on-chain security risks such as fraud and phishing
• Demonstrate a strong understanding of EVM-compatible blockchains and layer 2 solutions, and be familiar with DeFi design patterns

Requirements

• Proficient in Smart Contract programming languages, such as Solidity, among others
• Basic understanding of common Smart Contract security vulnerabilities
• Basic understanding of blockchain and smart contract principles, experienced with reading Blockchain explorers.
• Well versed with the different types of hacks on smart contracts, and its common attack vectors
• Well versed with the different types of scams such as Wallet Drainers in the space and how to identify them
• Familiar with smart contract development testing, transaction analysis, and other tools
• Experienced in using VSCode, Git, or other version control applications
• Proficient in Python or another object-oriented programming language
• Fundamental knowledge of code analysis and program debugging

Additional beneficial skills

• Passionate about cryptocurrency / DeFi / smart contract / blockchain
• Basic knowledge of fuzz testing or static analysis
• Basic knowledge of detection, exploitation, and prevention of security vulnerabilities
• Experience in smart contracts development (e.g Foundry, HardHat, etc.)
• Experience in CTF or bug bounty programs (e.g. Hack The Box, WebGoat, etc.)
• Experience in Front-end development (React, Javascript, Typescript)
• Experience in data mining and data analysis of on-chain data
• Have great interest in Binance, high work enthusiasm and responsibility, good and humble work attitude