Security Engineer (Blockchain & Web3 Security) (NCS/Job/ 3951)

Role Responsibilities

• Perform threat modelling and risk analysis for blockchain platforms, smart contracts, Web3 apps, wallets, and transaction flows.
• Conduct secure design and code reviews of smart contracts and Web3 components.
• Define and enforce smart contract and Web3 secure coding standards.
• Integrate automated security controls into CI/CD pipelines.
• Support internal and external security audits and remediation.
• Strengthen key management, custody, and signing controls.
• Contribute to incident response and post-incident improvements.

Core / Must-Have Skills

• 6–10+ years of experience in security or secure software engineering.
• Hands-on experience with blockchain and Web3 security.
• Strong Solidity and EVM knowledge.

• Familiarity with non-EVM platforms like Canton, Stellar.

• Exposure to DAML, RUST 
• Deep understanding of smart contract vulnerabilities and mitigations.
• Experience with secure SDLC and DevSecOps.
• Strong grounding in cryptography fundamentals.

·  Certified Blockchain Security Professional (CBSP) or equivalent recognised blockchain security certification 

·  Certificate in Blockchain Security / Smart Contract Security from a recognised industry or standards body 

·  Hands‑on smart contract security credentials, audits, or platform certifications covering EVM‑based chains (e.g., Ethereum), permissioned DLTs, or Web3 protocols

Good-to-Have Skills

• Experience with regulated or institutional digital asset platforms.
• Exposure to HSMs, MPC, or Vaults.
• Knowledge of fuzzing, invariant testing, or formal verification.

·  CISSP – Certified Information Systems Security Professional ((ISC)²) Or
CISM – Certified Information Security Manager (ISACA)