Smart Contract Security Analyst

Location: USA (Remote – with occasional travel to MI & VA) Full-Time | Salaried with Cogent 

Job Description:

We are seeking a highly skilled Smart Contract Security Analyst with 5–8 years of experience, including 3+ years specifically focused on smart contract auditing and blockchain security. This role is ideal for professionals passionate about securing decentralized applications and blockchain ecosystems. You will conduct in-depth audits, adversarial testing, and develop runtime coverage maps and red/green audit reports to ensure the highest level of contract integrity.

Key Responsibilities:

• Perform in-depth security audits of smart contracts, producing comprehensive red/green audit reports that highlight vulnerabilities, classify severity, and recommend remediations.
• Design and execute attack simulations and adversarial testing scenarios to assess the resilience of smart contracts against known and novel exploit strategies.
• Create and maintain runtime coverage maps to ensure thorough behavioral testing and identify gaps in contract logic execution.
• Collaborate with developers and auditors to integrate security best practices into the smart contract development lifecycle.
• Document and track remediation efforts, supporting iterative improvements and risk reduction.
• Assist in writing secure coding guidelines and contribute to the development of automated scanning and static analysis rules.

Required Skills and Qualifications:

• 5–8 years of overall experience in cybersecurity, with 3+ years specifically in smart contract and blockchain security.
• Strong knowledge of EVM-based platforms (e.g., Ethereum, Polygon) and Solidity.
• Experience with auditing tools like Slither, MythX, Foundry, or Hardhat.
• Demonstrated expertise in generating and interpreting red/green audit reports for blockchain applications.
• Hands-on experience executing attack simulations and penetration testing for smart contracts.
• Ability to construct and analyze runtime coverage maps to validate audit and test completeness.
• Familiarity with common DeFi vulnerabilities (e.g., reentrancy, flash loans, oracle manipulation).
• Effective communication and documentation skills for cross-functional security collaboration.