Lead offensive security penetration testing for blockchain, digital assets, and smart contract environments at Citi, ensuring enterprise-scale security across cloud and AI-driven applications.
- Plan, scope, and execute comprehensive penetration tests against blockchain networks, smart contracts, decentralized finance protocols, and digital asset custody systems.
- Perform manual and automated source code reviews of smart contracts written in Solidity, Rust, Go, or Vyper to identify logic flaws, reentrancy, front-running, flash loan vulnerabilities, and integer overflows.
- Act as a subject matter expert in offensive information security performing dynamic and manual security assessments on web technologies such as APIs, JavaScript Frameworks, Artificial Intelligence, and Distributed Ledger Technologies.
- Drive remediation by outlining a defense-in-depth approach to business stakeholders and providing strategic solutions to developers on effective preventive and detective security controls.
- Have strong technical writing and presentation skills to report and articulate the vulnerability assessment results to any audience.
- Master's Degree or PhD with 3+ years of professional or research experience in blockchain and related technical areas
- Bachelor's Degree with 5+ years of relevant professional experience in blockchain and related technical areas
