Remote Security Researcher (💰~$90k) at Spearbit | RemoteOK
Job Description
Spearbit is hiring a
🧩 What You’ll Do* Perform deep-dive security reviews of smart contracts, protocols, and blockchain infrastructure\n* Analyze protocol designs and identify attack surfaces across DeFi primitives, tokenomics, governance, MEV, bridges, and ZK systems\n* Work within a pod or as part of a curated team with other senior researchers\n* Provide actionable recommendations with clear technical and business impact assessments\n* Reproduce exploits, write POCs, and occasionally contribute patches\n* Publish post-mortems, technical articles, and internal reports as part of the knowledge-sharing culture\n\n🧪 Who You Are* Experienced: You’ve worked on or audited complex smart contracts and are deeply familiar with Solidity, EVM behaviour, and common vulnerability classes (e.g., reentrancy, logic flaws, gas griefing, access control). Bonus if you have exposure to Move, Zk, Cairo, Rust, or low-level protocol implementations.\n* Curious and Relentless: You don’t stop at surface-level bugs. You model systems end-to-end and attack assumptions from first principles.\n* Collaborative: You enjoy working with other security researchers and protocol developers to ship secure products.\n* Detail-Oriented: You produce clear, concise, and rigorous technical writeups. Your GitHub issues or findings are actionable and professional.\n* Credible: You’ve either contributed to open source projects, published security research, performed audits, played CTFs, or made a name for yourself in the bug bounty world.\n* Decentralization-Aligned: You value open networks, cryptographic innovation, and building resilient systems.\n\n🧱 Preferred Qualifications* Deep understanding of the EVM and Solidity\n* Experience auditing production smart contracts (solo or in teams)\n* Experience with cross-chain protocols, bridging, rollups, or ZK systems\n* Track record of high-impact bugs in bounties, audits, or competitions (e.g., Cantina, Paradigm CTF)\n* Familiarity with Ethereum security tooling: Foundry, Echidna, Slither, etc.\n* Experience writing or reviewing technical specs or protocol docs\n\n🚀 Nice to Haves* Prior experience in formal audits (Spearbit, Zellic, Trail of Bits, etc.)\n* Familiar with the Cantina Platform\n* Lead reviewer experience or ability to manage a team of researchers\n* Contributions to open-source security tooling\n* Security publications, conference talks, or technical blog posts\n\n🧭 What We Offer* Access to cutting-edge projects and deeply technical reviews\n* Compensation at the top end of the market\n* Collaboration with the best researchers + projects in the industry \n\n \n\n#Salary and compensation\n
No salary data published by company so we estimated salary based on similar jobs related to Senior and Senior jobs that are similar:\n\n
$60,000 — $120,000/year\n
\n\n#Benefits\n
💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
Apply for this job
👉 Please reference you found the job on Remote OK, this helps us get more companies to post here, thanks!
When applying for jobs, you should NEVER have to pay to apply. You should also NEVER have to pay to buy equipment which they then pay you back for later. Also never pay for trainings you have to do. Those are scams! NEVER PAY FOR ANYTHING! Posts that link to pages with “how to work online” are also scams. Don’t use them or pay for them. Also always verify you’re actually talking to the company in the job post and not an imposter. A good idea is to check the domain name for the site/email and see if it’s the actual company’s main domain name. Scams in remote work are rampant, be careful! Read more to avoid scams. When clicking on the button to apply above, you will leave Remote OK and go to the job application page for that company outside this site. Remote OK accepts no liability or responsibility as a consequence of any reliance upon information on there (external sites) or here.
