Technical Writer, Security - Parapet Labs

Parapet Labs is a smart contract security firm. We protect DeFi and Web3 protocols that hold real money, by finding the flaws before an attacker does. Our work covers EVM and SVM code review, AI-assisted scanning, protocol design review and fix verification.

We are small on purpose and senior-only. The final report is what the client keeps, shows their investors and acts on. It has to be right.

Quality is the whole product, so quality is how we operate.

• 𝗦𝗲𝗻𝗶𝗼𝗿 𝗲𝘆𝗲𝘀 𝗼𝗻 𝗲𝘃𝗲𝗿𝘆 𝗲𝗻𝗴𝗮𝗴𝗲𝗺𝗲𝗻𝘁. No juniors on client code.

• 𝗥𝗮𝗻𝗸𝗲𝗱 𝗮𝗻𝗱 𝗮𝗰𝘁𝗶𝗼𝗻𝗮𝗯𝗹𝗲. Every finding is severity-ranked and comes with a fix the team can ship.

• 𝗪𝗿𝗶𝘁𝘁𝗲𝗻 𝘁𝗼 𝗯𝗲 𝗮𝗰𝘁𝗲𝗱 𝗼𝗻. Reports are for the engineers who fix the bugs and for the people who sign off on launch.

• 𝗙𝗶𝗻𝗱𝗶𝗻𝗴𝘀 𝗯𝗲𝗳𝗼𝗿𝗲 𝘁𝗵𝗲 𝗳𝗶𝗻𝗮𝗹 𝗿𝗲𝗽𝗼𝗿𝘁. Critical issues are communicated the same day.

• 𝗣𝗿𝗼𝗼𝗳 𝗼𝘃𝗲𝗿 𝗰𝗿𝗲𝗱𝗲𝗻𝘁𝗶𝗮𝗹𝘀. We care about what you have written, not where you have worked.

It is a high-standards environment. The bar is high, the feedback is direct, and every sentence is expected to earn its place.

You own report quality, and you are the public voice of our technical work. You take complex vulnerabilities found by our auditors and turn them into clear write-ups that founders and engineers can act on. You also write the post-mortems and technical articles that show the wider ecosystem how real exploits work and how to prevent them. You work closely with the auditors, so you will need to understand the exploit, not just edit the grammar.

• Turn auditor notes and proofs of concept into clear, precise findings.

• Make sure every finding is correctly severity-ranked, reproducible and comes with a concrete fix.

• Edit ruthlessly: cut filler, remove ambiguity and make sure each finding stands on its own.

• 𝗪𝗿𝗶𝘁𝗲 𝗽𝗼𝘀𝘁-𝗺𝗼𝗿𝘁𝗲𝗺𝘀: analyze real exploits and incidents, reconstruct the attack step by step, explain the root cause and the lesson for builders.

• 𝗪𝗿𝗶𝘁𝗲 𝘁𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗮𝗿𝘁𝗶𝗰𝗹𝗲𝘀: deep dives on vulnerability classes, audit techniques, fuzzing and invariant testing, and findings we are cleared to share, written for engineers and protocol teams.

• Work with auditors and researchers to turn their knowledge into publishable pieces, and get every technical claim checked before it goes out.

• Keep our report structure, templates and style guide consistent and up to date.

• Write summaries for a non-technical reader, such as a founder, investor or board member.

• Ask the auditor the question that exposes a gap in the explanation, before the client does.

• 𝗔 𝗽𝗼𝗿𝘁𝗳𝗼𝗹𝗶𝗼 𝗼𝗳 𝘁𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝘄𝗿𝗶𝘁𝗶𝗻𝗴: audit reports, post-mortems, technical articles or documentation we can read.

• You can follow a smart contract exploit end to end, from on-chain transactions to root cause, and explain it precisely.

• You can write a long-form technical article that engineers finish reading and trust.

• Ruthless editing: severity-ranked, actionable, zero filler.

• A reader-first mindset, writing for the person who has to fix the issue tonight.

• You are comfortable asking technical questions until you fully understand the issue.

• You deliver on time and communicate clearly while working remotely.

• Basic Solidity reading skills, enough to follow the code a finding refers to.

• Previous experience writing or editing audit reports, security advisories, post-mortems or technical blog articles.

• Experience reading transactions and traces on a block explorer or with tools like Foundry or Tenderly to reconstruct an attack.

• Experience in DeFi or Web3 security.

• Experience building report templates, style guides or documentation systems.

• Public writing under your own name.

• Fully remote contract work, with your own schedule within delivery deadlines.

• Direct work with senior auditors, which means you learn how real exploits work from the people who find them.

• Real impact: your writing is what clients see, share and act on.

• A culture where quality is respected and writing is treated as part of the security work.

• Competitive compensation.