Perform deep-dive security reviews of smart contracts, protocols, and blockchain infrastructure
Analyze protocol designs and identify attack surfaces across DeFi primitives, tokenomics, governance, MEV, bridges, and ZK systems
Work within a pod or as part of a curated team with other senior researchers
Provide actionable recommendations with clear technical and business impact assessments
Reproduce exploits, write POCs, and occasionally contribute patches
Publish post-mortems, technical articles, and internal reports as part of the knowledge-sharing culture
Experienced: You've worked on or audited complex smart contracts and are deeply familiar with Solidity, EVM behaviour, and common vulnerability classes (e.g., reentrancy, logic flaws, gas griefing, access control). Bonus if you have exposure to Move, Zk, Cairo, Rust, or low-level protocol implementations.
Curious and Relentless: You don’t stop at surface-level bugs. You model systems end-to-end and attack assumptions from first principles.
Collaborative: You enjoy working with other security researchers and protocol developers to ship secure products.
Detail-Oriented: You produce clear, concise, and rigorous technical writeups. Your GitHub issues or findings are actionable and professional.
Credible: You’ve either contributed to open source projects, published security research, performed audits, played CTFs, or made a name for yourself in the bug bounty world.
Decentralization-Aligned: You value open networks, cryptographic innovation, and building resilient systems.
Deep understanding of the EVM and Solidity
Experience auditing production smart contracts (solo or in teams)
Experience with cross-chain protocols, bridging, rollups, or ZK systems
Track record of high-impact bugs in bounties, audits, or competitions (e.g., Cantina, Paradigm CTF)
Familiarity with Ethereum security tooling: Foundry, Echidna, Slither, etc.
Experience writing or reviewing technical specs or protocol docs
Prior experience in formal audits (Spearbit, Zellic, Trail of Bits, etc.)
Familiar with the Cantina Platform
Lead reviewer experience or ability to manage a team of researchers
Contributions to open-source security tooling
Security publications, conference talks, or technical blog posts
Access to cutting-edge projects and deeply technical reviews
Compensation at the top end of the market
Collaboration with the best researchers + projects in the industry
Top Skills
What We Do
Cantina is the leading security platform connecting top researchers and purpose-built tools to protect critical code. Backed by Spearbit’s expert network, we help blockchain and financial teams scale security with high-impact solutions.
