Web3 Security Triager (AuditAgent & AgentArena)
NethermindHong Kong
Posted January 28, 2026
Full Time
About the Company
Nethermind is a leading blockchain technology firm that builds and researches Ethereum-based solutions, offering R&D, consulting, and engineering services to DeFi and enterprise clients. The team specializes in protocol engineering, layer 2 scaling, smart contract development, and enterprise blockchain integration, delivering high-performance, secure products that accelerate adoption of decentralized finance. By actively contributing to Ethereum core development and partnering with industry leaders such as StarkWare, POA, and EWF, Nethermind positions itself at the forefront of ecosystem innovation. The company’s collaborative culture, driven by a world-class team of builders and researchers, fosters continuous improvement and rapid deployment of cutting-edge blockchain solutions.
Job Description
Nethermind is building an AI-driven security product line to help protocols and developers find vulnerabilities earlier, cheaper, and faster. We're looking for a hands-on Web3 Security Triager to validate AI-generated findings, filter out false positives, and ensure customers receive high-signal, actionable security insights.
Requirements
- Solid understanding of Web3 security: common vulnerability classes in smart contracts (reentrancy, access control, oracle manipulation, etc.)
- Proficiency in Solidity: ability to read, understand, and reason about contract logic and potential exploits
- Proficiency with AI coding tools: hands-on experience with tools like Cursor, Claude Code, or similar — you should already be using AI to accelerate your workflow
- Ability to write PoC exploits: demonstrate valid bugs with working proof-of-concept code (using AI assistance is expected and encouraged)
- Strong attention to detail: triage requires careful analysis and clear severity reasoning
- Proactive and creative mindset: you'll be expected to suggest improvements, not just execute tasks
