Web3 VAPT / Security Pen-tester

About us🥷:

QuillAudits, founded in 2018, is a leading Web3 security company that has secured 1500+ protocols across 25+ blockchains.

We partner with DeFi protocols, ecosystems, RWA projects, stablecoin issuers, L2s, infrastructure teams, and companies building with Solidity, Rust, Move, and other blockchain technologies.

Today, QuillAudits is evolving beyond audits into a full-stack Web3 security partner, offering security solutions across the entire protocol lifecycle—from audit readiness and smart contract reviews to adversarial testing, formal verification, pentesting, governance reviews, and continuous monitoring.

https://www.linkedin.com/company/quillaudits

We are looking for a Web3 VAPT / Security Pentester with strong hands-on experience in Web2 + Web3 application security, including dApps, wallets, APIs, and mobile applications.

What you will do:

• Perform VAPT of Web3 dApps, APIs, wallets, and backend systems.
• Test wallet integrations, SIWE, signature verification, EIP-712, transaction flows, WalletConnect, and Web3 authentication.
• Identify Web3 attack vectors including signature/replay attacks, authorization bypass, wallet spoofing, transaction manipulation, business logic flaws, and chain-related issues.
• Perform Web2/API testing covering OWASP Top 10, IDOR/BOLA, XSS, SSRF, CSRF, JWT/OAuth, injection, authentication and authorization issues.

• Conduct Android & iOS mobile application security testing, including:

  • Static/source code review
  • Dynamic analysis
  • API and network security testing
  • Authentication/session testing
  • Secure storage and cryptography review
  • Reverse engineering and runtime manipulation

• Understand the complete attack surface: dApp + Wallet + API + Backend + Blockchain + Mobile.

• Prepare clear technical reports with PoC, impact, severity, reproduction steps, and remediation.

What we are looking for:

• Bachelor's / Master's degree in Computer Science, Information Security, or a related field (or equivalent experience)
• 2+ years of hands-on VAPT / Application Security experience
• Strong Web3, dApp, wallet, and blockchain understanding
• Strong Web2/API security knowledge
• Experience with Burp Suite and common security testing tools
• Experience with Android & iOS security testing and source-code review
• Familiarity with Solidity/EVM, Foundry/Hardhat, ethers.js/viem is a plus.
• Strong offensive security mindset and ability to work independently on project deadlines.
• Strong problem-solving skills, attention to detail, and ability to work independently and collaboratively.

Why we are awesome:

• Flexible Bliss: Flexi-working, remote freedom and a delightful 5-day work week
• Sparkling Rewards: Performance-based incentives and an attractive salary package that celebrates your skills and mastery in your speciality
• Energizing Environment: Thrive in an amazing space that fuels inspiration and creativity
• Boundless Learning: Dive into continuous learning with a generous annual budget for career growth and knowledge enhancement, including a monthly book reading allowance.
• Worldly Pursuits: Jet-set to global conferences & meetups, and indulge in workations twice a year with the entire team, our treat!
• Empowered Collaboration: Learn from tech titans and experience a flat organizational structure that opens doors to work closely with the founder and collaborate with industry leaders for a fulfilling career.
• Pioneering Spirit: Join the blockchain vanguard and shape the future with us!

The Quill Mindset 🎯

Q- Quick to Execute, U- Unique & unfaltering go-getter, I- Innovative problem solver, L- Learned & knowledgeable, L- Leader in his/her domain

If you think you can match up and are seeking a company that prides itself on its workplace culture, then you could be our next Quill!

Our Hiring Process:

• Application review
• Technical challenge (Task based screening)
• Technical Interview
• Founder's Connect
• Offer roll-out & your journey as a Quill begins!

QuillAudits is proud to be an Equal Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age.