Web3 Security Researcher & Technical Writer

Security Researcher & Technical Writer

QuillAudits, founded in 2018, is a leading Web3 security company that has secured 1500+ protocols across 25+ blockchains. We partner with DeFi protocols, ecosystems, RWA projects, stablecoin issuers, L2s, infrastructure teams, and companies building with Solidity, Rust, Move, and other blockchain technologies. Today, QuillAudits is evolving beyond audits into a full-stack Web3 security partner, offering security solutions across the entire protocol lifecycle—from audit readiness and smart contract reviews to adversarial testing, formal verification, pentesting, governance reviews, and continuous monitoring.

We're looking for a Security Researcher & Technical Writer to drive our security research initiatives and create in-depth, high-quality technical content. The ideal Quill should have deep expertise in blockchain security, smart contract vulnerabilities, cryptographic methodologies, and Web3 security frameworks. This role requires a blend of research, content creation, community engagement, and tool development.

Audit Process & Security Knowledge:

• Document and improve security knowledge frameworks.
• Develop audit process frameworks to enhance security standards.
• Analyze security protocols and methodologies, tracking new attack vectors.
• Research and document hashing methodologies, cryptographic security principles, and best practices.

Security Research & Contributions:

• Contribute to Ethereum security discussions, particularly EIPs (Ethereum Improvement Proposals).
• Participate in research and development of security tools such as Slither, Mythril, Echidna, and others.
• Conduct in-depth research on various blockchain protocols, analyzing their mathematical and cryptographic designs.
• Evaluate and report on new blockchain technologies to identify attack surfaces and security risks.

Hack Analysis & Threat Intelligence:

• Perform real-time analysis of smart contract hacks and security breaches.
• Distribute findings rapidly to the security community through reports, Twitter threads, and blog articles.
• Collaborate with the incident response team to improve threat detection and mitigation strategies.

Industry Partnerships & Engagement:

• Establish and maintain strategic partnerships with blockchain security institutions.
• Engage with security groups, technical communities, and research organizations such as ETHSecurity, Ethereum Stack Exchange, ETH Magicians, and Slowmist.
• Publish security insights on Web3 security trends via Twitter, blogs, GitHub, and research papers.

Security Tooling & Frameworks:

• Maintain and enhance security monitoring tools such as QuillMonitor.
• Sync with leading blockchain security platforms and repositories.
• Develop, test, and pitch open-source security tools for the Web3 ecosystem.

Emerging Security Trends & Narratives:

• Track and analyze security narratives across ZK (Zero-Knowledge), MPC (Multi-Party Computation), Cross-Chain Communication, Rollups, Sidechains, State Channels, and Economic Security.
• Stay ahead of evolving trends in security infrastructure and decentralized identity management.

Educational Content & Thought Leadership:

• Publish deeply researched blogs, whitepapers, and reports on Web3 security trends, including Agentic Security, AVS Security, Eclipse, Zetachain, SocialFi, TVL trends, and recent exploits.
• Develop Web3 security video-based learning courses for educational outreach.
• Conduct detailed reviews of Web3 security tools, providing insights into their capabilities and potential vulnerabilities.
• Write and conduct interviews with top minds in the Web3 security space.
• Organize and lead workshops, webinars, and technical sessions for developers on best practices in smart contract security.

What we are looking for:

• Web3 Native: You have a strong understanding of blockchain, smart contracts, DeFi, cryptography, and the Web3 ecosystem. You're genuinely passionate about security and curious about how things work under the hood.
• Security Obsessed: You understand smart contract vulnerabilities, attack vectors, blockchain protocols, and security frameworks. You enjoy digging deep, questioning assumptions, and finding what others might miss.
• AI-Native: You love experimenting with AI tools, agents, and emerging technologies. You constantly look for smarter ways to research, analyze vulnerabilities, automate workflows, and create.
• A Research Enthusiast: You enjoy exploring complex technical concepts, investigating exploits, analyzing protocols, and staying ahead of emerging security threats.
• A Communication Powerhouse: You have excellent written and verbal communication skills. You can simplify complex technical concepts, articulate your findings, and confidently engage with developers, researchers, and industry experts.
• A Technical Storyteller: You enjoy writing blogs, research papers, technical reports, Twitter threads, and documentation. You know how to turn complex research into content that educates, informs, and sparks conversations.
• A Builder Mindset: You're excited to experiment with security tools, contribute to open-source projects, build prototypes, and explore new ideas that make Web3 safer.
• Community Driven: You're enthusiastic about engaging with Web3 security communities, participating in technical discussions, sharing knowledge, and building meaningful industry connections.
• Hungry to Grow: You're proactive, curious, open to feedback, and always looking to learn, experiment, and push boundaries.
• Built for the Pace: You thrive in a fast-moving environment, juggle multiple priorities, take ownership, and turn ideas into action without waiting to be told what to do.

Nice-to-Have Skills:

• Experience contributing to Ethereum EIPs, security working groups, or open-source security tools.
• Familiarity with formal verification techniques, on-chain monitoring, and forensic analysis.
• Participation in security communities like ETHSecurity, Ethereum Magicians, or Bug Bounties.
• Ability to develop and maintain security tooling for real-time monitoring.

Why we are awesome:

• Flexible Bliss: Flexi-working, remote freedom and a delightful 5-day work week
• Sparkling Rewards: Performance-based incentives and an attractive salary package that celebrates your skills and mastery in your speciality
• Energizing Environment: Thrive in an amazing space that fuels inspiration and creativity
• Boundless Learning: Dive into continuous learning with a generous annual budget for career growth and knowledge enhancement, including a monthly book reading allowance.
• Well-being Benefits: Boost your well-being with the comprehensive health insurance coverage and the monthly fitness & wellness allowances.
• Worldly Pursuits: Jet-set to global conferences & meetups, and indulge in workations twice a year with the entire team, our treat!
• Empowered Collaboration: Learn from tech titans and experience a flat organizational structure that opens doors to work closely with the founder and collaborate with industry leaders for a fulfilling career.
• Pioneering Spirit: Join the blockchain vanguard and shape the future with us!

The Quill DNA:

We value people who take ownership, communicate openly, think boldly, keep learning, and get things done. We believe in initiative over hand-holding, collaboration over silos, and growth over comfort. If you know Web3, love people, think commercially, and have the drive to make things happen — let's talk.

Come build with TeamQuills

Our Hiring Process:

• Application review
• Technical challenge (Task based screening)
• Technical Interview
• CEO and Culture Connect
• Offer roll-out and your journey as a Quill begins!
• Total expected time to hire: 2-3 weeks

QuillAudits is proud to be an Equal Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age.