Smart Contract Triager

If Immunefi is Web3’s last line of defense against catastrophic hacks, the Triage team at Immunefi is the internal intelligence division actively confirming and improving the defense strategy.

Introduction

If Immunefi is Web3’s last line of defense against catastrophic hacks, the Triage team at Immunefi is the internal intelligence division actively confirming and improving the defense strategy. The Smart Contract triager role requires timely, appropriate, and thorough response to reported vulnerabilities. We aim to provide excellent service, ensuring hackers trust us with critical findings and receive timely, appropriate responses. Our technical evaluation of bugs is crucial for rewarding their hard work. We also strive to help hackers grow their capabilities, turning early bad bug reports into great ones in the future.

Responsibilities

• Review incoming Smart Contract vulnerability reports and reproduce issues, assessing their severity and impact within each organization’s threat model.
• Work with hackers to identify missing information in reports and educate the community when reports are incorrect.
• Write brief summaries for each report, including clear reproduction steps, impact, and remediation advice.
• Coordinate with our Bug Bounty Program team and customers to ensure smooth triage workflows for any programs you work with.
• Liaise across and advocate for parties on both sides of the Bug Bounty (Projects & Whitehats), providing advice, support & technical consultation to ensure accuracy of information, fairness of outcome, and engagement of users.
• Proactively identify and solve issues, as well as accept and quickly respond to delegated work.

Requirements

• Ability to write top-quality code samples and mini-applications to demonstrate explained technologies.
• Familiarity with vulnerability disclosure and bounty programs, including report formatting, content, confidentiality, disclosure processes, clear and quick communication between hackers and customers, and program policies.
• Ability to prioritize and organize operationally complex work, with great attention to detail.
• Deep technical understanding of Smart Contracts, Smart Contract errors, and Smart Contract vulnerabilities.
• Top-notch communication skills: able to firmly yet politely respond to non-issues, identify legitimate issues, and communicate them to security teams in an easy-to-understand format.
• Technical knowledge around Web3 security: ability to identify and reproduce reported vulnerabilities and assess contextual risk.
• Work schedule aligned to Central / Western European Timezones (CET/WET).

Benefits

Being a fully remote company, we are willing to consider applicants in any area; however, due to the needs of our current Projects & Whitehats, we require someone taking this role to have a work schedule aligned to Central / Western European Timezones.

How to Apply

Apply through the provided link.

When applying, mention the word CANDYSHOP to show you read the job post completely. This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they are human.