Nethermind

Auditor

• Perform security reviews and audits of cryptographic and zero-knowledge systems, including primitives, protocols, zkDSL circuits, and zkVM guest programs
• Analyze correctness, soundness, completeness, and potential privacy leakage in ZK programs
• Review production code used in Ethereum and Aztec ecosystems and help teams identify and remediate vulnerabilities
• Collaborate with teammates to maintain and improve Nethermind’s internal blockchain security tooling
• Design and implement new security tools for cryptography and ZK systems
• Stay up to date with emerging ZK constructions, proof systems, and attack vectors
• Participate in client meetings to explain findings, recommend best practices, and support remediation efforts
• Contribute to internal knowledge sharing, research notes, and (optionally) public-facing content

Zero Knowledge/Cryptography Auditor

Security Engineer

• Own vision, roadmap, and outcomes
• Build deep understanding of user needs by interviewing protocol teams
• Improve the developer workflow for vulnerability detection + findings quality
• Drive integrations (CI/CD, repo scanning, reporting formats)
• Own the product mechanics for multi-agent parallel audits and fair evaluation
• Define benchmarks/evals for vulnerability detection quality
• Define packaging and pricing, and drive GTM with the BD team
• Write clear product requirements and coordinate delivery with engineering
• Run weekly execution cadence and maintain high bar on security, privacy, and reliability

Product Manager – AI, Web3 Security

• Triage AI-generated findings (AgentArena)
• Review and validate vulnerability reports generated by AI agents
• Filter false positives to ensure customers receive only high-quality, actionable findings
• Classify severity and provide clear reasoning for each decision
• Maintain fast turnaround without sacrificing accuracy
• Run AuditAgent in public audit competitions
• Execute AuditAgent on live contests (Code4rena, Sherlock, Cantina, and similar platforms)
• Triage the output: validate real bugs, discard noise
• Write Proof of Concept (PoC) code for valid findings using AI coding tools
• Submit validated findings and track results to measure tool performance
• Improve detection quality through feedback
• Share insights with the product and engineering team on common false positive patterns
• Propose new triage strategies, automation ideas, and process improvements
• Help build internal benchmarks and quality metrics based on real-world results
• Document and communicate results (nice to have)
• Write internal reports summarizing competition outcomes and tool performance
• Contribute to public content (blog posts, case studies) showcasing AuditAgent/AgentArena capabilities

Web3 Security Triager, AuditAgent – AgentArena

• Work directly with protocols in the Ethereum and StarkNet ecosystems to review their code and help secure their protocols;
• Collaborate with teammates to maintain and continually improve our existing blockchain security tools using modern software engineering practices;
• Develop new blockchain security tools;
• Engage in meetings with clients to discuss security and best practice improvements.

Zero Knowledge/Cryptography Auditor

Product Manager – AI, Web3 Security

Web3 Security Triager, AuditAgent – AgentArena

Smart Contract Auditor