Smart Contract Security Auditor

About the role

This is Orion's core role. You review client Solidity codebases with an adversarial mindset, write clear reports, and partner with teams through remediation. You are not shipping a custody product; you are making their contracts safer.

Responsibilities

• Perform manual smart contract reviews across DeFi, infrastructure, and institutional codebases
• Produce threat models, findings, and proof-of-concept exploits where appropriate
• Run and interpret automated analysis (fuzzing, static analysis) to support manual review
• Present results to client engineering and leadership; support remediation Q&A
• Contribute to Orion audit standards, checklists, and internal knowledge base

Requirements

• Deep Solidity / EVM expertise and a track record finding high-impact vulnerabilities
• Experience delivering professional audit or security review reports
• Ability to communicate risk clearly to both engineers and non-technical stakeholders
• Comfort with Foundry or equivalent for validation and PoC development
• Integrity and discretion when handling unreleased client code

Nice to have

• Prior work at a recognized audit firm or as an independent auditor
• Experience with upgradeable proxies, cross-chain bridges, or oracle-heavy systems
• Public research, CTF wins, or disclosed bug bounties
• Familiarity with formal verification or symbolic execution tooling

Benefits

• Meaningful founding equity
• Flexible PTO and remote-first culture
• Budget for conferences, training, and research time
• Home-office stipend
• Health coverage as we formalize benefits
• Direct impact on ecosystem safety