Web3 Wallet Security Auditor

Responsibilities:

• Responsible for security audit work related to web3 wallet (mainly Java code), identify potential risks such as business requirements and Technology Implementation schemes, provide solutions and promote landing;
• Study the characteristics of the new chain, deeply understand the latent risks that may exist in the docking process of the new chain, and promote risk avoidance in code implementation;
• Participate in the R & D process of the entire Product R & D team and promote the implementation of SDL;

Qualifications:

• Familiar with and master relevant application security and blockchain security knowledge, understand the internal principles, mining methods, vulnerability code scenarios, exploitation methods, solutions, etc. of common security bugs;
• At least 3 years of experience in business development and security audit based on Java or other languages, leading or participating in SDL implementation;
• Familiar with the blockchain industry and related technologies, common security risks, and the working principles of mainstream chains (BTC, ETH, etc.);
• Familiar with commonly used encryption, decryption, signature, and other algorithms, especially those commonly used in web3 wallets, such as ECDSA, ED25519, RSA, AES, SSS, etc.;
• Have a certain background in penetration knowledge and be familiar with mainstream attack methods;
• Have a strong interest in emerging blockchain technology and be able to self-drive to learn and understand.

Preferred Qualifications:

• Actually wrote a local wallet project;
• Participated in well-known open source projects;
• Have some understanding of on-chain attack methods and have a deep understanding of the principles of attacks.