Back
GSR-2
Security Researcher
Role
The GSR role is tailored to provide direct impact for the projects and institutions that Guardian serves. As a full-time security researcher, you will focus on what we do best, auditing.
The GSR-2 role emphasizes a direct focus on rapidly improving as a security researcher through two main pathways:
- Facing novel DeFi applications that are challenging but not out of reach.
- Working alongside world-class security researchers who are masters in their own domain, and vigorously collaborate, share, and push each other to be better.
A GSR-2 level Security Researcher is autonomous when it comes to conducting manual analysis, testing, and fuzzing for team engagements, while benefiting from the mentorship of senior team members. Driving a culture of excellence and teamwork, a GSR-2 level Security Researcher is pivotal in propelling the team's progress.
Culture
At Guardian, we are dedicated to delivering unparalleled Smart Contract Security and cultivating a space where you can truly unleash your highest potential.
Here's how our "Culture First" approach manifests:
- Culture fit: Beyond skill-level, a genuine alignment with our values is paramount. We only onboard individuals who truly resonate with our ethos and want to solve the problem of Smart Contract Security as much as we do.
- Pushing Each Other: Guardian is where A players come to learn from each other, compete, and reach new heights together.
- Championing The Team: At Guardian, nobody is bigger than the team — we all have each other’s back and understand that the best way to grow our own slice is to grow the whole pie.
What You’ll Do
- Conduct thorough and detailed Solidity security reviews, uncovering as many vulnerabilities as possible while making a significant impact on DeFi and Web3 adoption.
- Collaborate closely with peers and protocol developers to understand the full scope and nuances of the most influential and targeted Smart Contract systems in the world.
- Develop and implement proof-of-concept (PoC) exploits for identified high-impact vulnerabilities to demonstrate risk.
- Provide comprehensive and actionable remediation recommendations to clients, ensuring that they are both robust and feasible.
- Stay updated with the latest developments in Solidity, smart contract vulnerabilities, and mitigation techniques.
- Participate in team knowledge-sharing sessions and contribute to Guardian’s internal knowledge base.
- When not on engagements, contribute to the creation and refinement of Guardian's security review methodologies and tools.
- Take “research weeks” to study whatever it is that interests you in DeFi or Security and otherwise recover from high performing engagement weeks.
Expected Results
- Consistently contributes to at least 50% of the findings in each engagement.
- Crafts reports masterfully with every issue clearly comprehended by clients.
- Validates all High and Critical issues with PoC’s.
- Contributes to testing and verification efforts with thoughtful fuzzing and written tests.
- Upholds a standard of security excellence and encourages others to do the same.
- On engagements roughly 42 weeks of the year. Non-engagement time is spent reflecting as a team and improving team methodologies and tools.
What We Look For In You
We believe in hiring not just based on credentials, but also on passion and drive. While we do have a set of criteria, we're open to candidates who showcase exceptional talent and drive.
For the Ideal Candidate:
Experience:
- 1-3 years of Web3 Security experience
- Proven track record of high performance and team responsibility across many reviews with Guardian or another team.
Achievements (At least 1):
- Demonstrates commendable auditing performance, often ranking highly in public contests.
- Exhibits strong performance and dedication during private audits.
- Has made some impactful vulnerability disclosure.
Skills:
- Proficient in identifying vulnerabilities and implementing mitigation strategies.
- Strong understanding of Ethereum blockchain concepts, protocols, and associated security risks.
- Adept at crafting and testing proof-of-concept exploits.
- Skilled in effective communication and report writing, ensuring clarity and understanding for others.
- Familiarity with the latest tools, platforms, and methodologies in smart contract auditing.
- Skilled in verification concepts such as fuzzing, symbolic execution, and static analysis.
- Familiar with advanced EVM concepts, can comprehend assembly blocks without trouble.
Traits
- Detail-oriented and meticulous in analysis and review processes.
- Collaborative mindset, working well within a team and fostering a positive working environment.
- Proactive in continuous learning, staying updated with the ever-evolving DeFi landscape.
- Independent thinker, able to generate unique solutions and perspectives without guidance.
Role Progression
We believe in creating opportunities to satisfy the largest of ambitions. Show us your potential, and we'll provide you with the opportunities and resources to ascend to Higher Level Security Researcher, or leadership roles.
In your form submission below, be sure to include the phrase “red dot” in one of your responses.
Salary
- $145,000-$160,000 OTE (On-Target-Earnings), with a base salary being 50% and projected findings bonuses being 50%.
- Additional profit sharing after 1 year at the company.
We are open to discussing payment structures, whether you prefer a higher base salary or performance-based incentives. Let's find what works best for you!
Benefits
Flexible Working Hours 💡 - Enjoy the freedom to work remotely and choose the hours that align with your productivity peaks.
Team Retreats 🏝️ - Don’t just audit together, cultivate meaningful friendships that make fortifying the Web3 ecosystem a fulfilling experience with planned team retreats and get-togethers.
Paid Time Off (PTO) ✈️ - High performance requires high quality rest. We offer unlimited PTO, the right candidate derives great passion and fulfillment from security research and can manage their time off responsibly.
Research Weeks 🔬 - Take 10 research weeks a year to focus on whatever you’re interested in and effectively recover from engagement weeks.
National Holidays 🗓️ - We observe 12 National Holidays, which can be seamlessly adapted into the national holidays in your country.
No Useless Meetings 📞 - Collaborate with your team as you see fit, enjoy a wide open calendar with abundant focus time.
Company Culture ❤️ - Our culture thrives on collaboration, inspiring performance, and innovation. We believe in empowering our team members, fostering a space for open dialogue, continuous learning, and mutual respect. Join us in building not just a business, but a community.
