Sr. Security Engineer; Penetration Testing

Position: Sr. Security Engineer (Penetration Testing)
CertiK# Sr. Security Engineer (Penetration Testing)
Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Apply for this job View company

Remote from:
USASalary:
USD 100k–180k / yr Department:
Cybersecurity Employment:
Full Time

Experience:

Open level

Published:
27 Oct 2026

Apply before:
26 Nov 2026

Listing views:
125

Application actions:
8

Application toolkit## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary## The role, at a glance.

CertiK is hiring a senior security engineer to conduct penetration tests and application-security assessments across web, mobile, thick-client, cloud, network, and browser-extension environments. The role combines hands-on offensive security work, source-code review, threat modeling, reporting, and research into blockchain and Web3 security techniques. Candidates need at least four years of application-security and penetration-testing experience, strong JavaScript/Type Script knowledge, scripting skills, and familiarity with AWS, Azure, and GCP risks.

Web3 penetration testing, smart-contract audit experience, security certifications, bug-bounty participation, and community contributions are valuable differentiators.## Role DNAA quick view of the complexity, pace, ownership and collaboration implied by the job description.### Job Complexity5/5

Easy Hard### Pace & Pressure4/5

Relaxed Fast-paced### Autonomy Level4/5

Guided Full ownership### Communication Load4/5

Independent Collaborative
** AI insight
** This is a senior offensive-security role requiring broad testing expertise across applications, mobile, networks, cloud, and code review, plus cryptography and emerging Web3 concepts. Client-facing reporting and security research add technical depth and accountability.## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)
Market rate**$140,000
** US market range (per year)**$130k–$190k
** 0 $ 209.00k
** AI insight
** The employer explicitly lists a US annual base-salary range of $100,000–$180,000, with a midpoint of $140,000 per year. Estimated US market compensation for a senior penetration-testing and application-security engineer with blockchain exposure is approximately $130,000–$190,000 annually; this is an AI estimate, not verified salary research.## Core skills

Skills and capabilities most closely associated with this opportunity.

Application security

Penetration testing

Web application security

Mobile application security

Network penetration testing

Source code review

Cloud security

Threat modeling

Java Script Type Script Python Bash Cryptography AWSSmart contract security
** Sample interview questions
** Opportunity details## About this role.
** Why Us?
** CertiK is a pioneer in blockchain security, leveraging best-in-class AI technology to protect and monitor blockchain protocols and smart contracts. Founded in 2018 by professors from Yale University and Columbia University, CertiK’s mission is to secure the web3 world. CertiK applies cutting-edge innovations from academia to enterprise, enabling mission-critical applications to scale with safety and correctness.
** About the Role
** The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position.

If you are…