Web3 Security Triager - AI-Driven Vulnerability Detection

About the Role

We are seeking a skilled Web3 Security Triager to join our remote team at Nethermind. In this role, you will play a crucial part in our AI-driven security product line, focusing on identifying and mitigating vulnerabilities in smart contracts. As a Web3 Security Triager, you will validate AI-generated findings, ensuring that our customers receive high-quality, actionable security insights.

What You'll Do

• Triage AI-generated findings (AgentArena): Review and validate vulnerability reports generated by AI agents, filtering out false positives to ensure customers receive only high-quality, actionable findings.
• Run AuditAgent in public audit competitions: Execute AuditAgent on live contests (Code4rena, Sherlock, Cantina), validate real bugs, and write Proof of Concept (PoC) code for valid findings using AI coding tools.
• Improve detection quality through feedback: Share insights with the product and engineering team on common false positive patterns and propose new triage strategies.
• Document and communicate results: Write internal reports summarizing competition outcomes and contribute to public content showcasing AuditAgent/AgentArena capabilities.

Requirements

• Solid understanding of Web3 security and common vulnerability classes in smart contracts (e.g., reentrancy, access control, oracle manipulation).
• Proficiency in Solidity and ability to read, understand, and reason about contract logic and potential exploits.
• Hands-on experience with AI coding tools like Cursor or Claude Code.
• Ability to write PoC exploits and demonstrate valid bugs with working proof-of-concept code.
• Strong attention to detail and proactive mindset, with a focus on suggesting improvements.

Nice to Have

• Experience with Solana / Rust smart contract security.
• Prior participation in audit competitions (Code4rena, Sherlock, Immunefi).
• Background in security research or junior auditing roles.
• Writing skills for documenting findings or creating public-facing content.
• Familiarity with common security tools (Slither, Foundry).

What We Offer

• Competitive salary in the range of $120,000 to $150,000 per year.
• Fully remote work environment with a globally distributed team.
• Opportunities for professional growth and development in the Web3 security space.
• Collaborative and innovative team culture focused on cutting-edge technology.
• Flexible working hours to accommodate your schedule.