Web3 VAPT Security Pentester
Posted 16
views
Summary
A remote security pentester role performing VAPT on Web3 dApps, wallets, APIs, backend systems, and mobile apps at QuillAudits. Day to day involves testing Web3 auth flows (SIWE, EIP-712, WalletConnect), Web2/API and mobile security, and writing detailed reports with PoCs and remediation guidance using tools like Burp Suite.
You will perform vulnerability assessment and penetration testing of Web3 dApps, APIs, wallets, backend systems, and mobile applications. You will assess wallet integrations and Web3 authentication flows, identify attack vectors and application-security weaknesses, review mobile applications, and document findings with proof of concept, impact, reproduction steps, and remediation guidance.
Responsibilities
- Perform VAPT of Web3 dApps, APIs, wallets, and backend systems
- Test wallet integrations, SIWE, signature verification, EIP-712, transaction flows, WalletConnect, and Web3 authentication
- Identify Web3 attack vectors and business-logic flaws
- Perform Web2 and API security testing
- Conduct Android and iOS mobile application security testing
- Review source code, secure storage, cryptography, and runtime behavior
- Prepare technical reports with proof of concept, impact, severity, reproduction steps, and remediation
Requirements
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent experience
- 2+ years of hands-on VAPT or application-security experience
- Strong understanding of Web3, dApps, wallets, and blockchain
- Strong Web2 and API security knowledge
- Experience with Burp Suite and security testing tools
- Experience testing Android and iOS security and reviewing source code
- Familiarity with Solidity, EVM, Foundry, Hardhat, ethers.js, or viem is a plus
Benefits
- Flexible working arrangements
- Remote work
- Five-day work week
- Performance-based incentives
- Global conferences and meetups
- Company-paid workations twice a year