Page 1 of 2

Open Application - Parapet Labs

๐—ฅ๐—ฒ๐—บ๐—ผ๐˜๐—ฒ

๐—ช๐—ต๐—ผ ๐˜„๐—ฒ ๐—ฎ๐—ฟ๐—ฒ:
Parapet Labs is a smart contract security firm. We protect DeFi and Web3 protocols that hold real money, by finding the flaws before an attacker does. Our work covers EVM and SVM code review, AI-assisted scanning, protocol design review and fix verification.

We are small on purpose and senior-only, and we hire people who enjoy breaking systems more than building them, and can prove it.

๐—›๐—ผ๐˜„ ๐˜„๐—ฒ ๐˜„๐—ผ๐—ฟ๐—ธ:
Quality is the whole product, so quality is how we operate.

โ€ข ๐—ฆ๐—ฒ๐—ป๐—ถ๐—ผ๐—ฟ ๐—ฒ๐˜†๐—ฒ๐˜€ ๐—ผ๐—ป ๐—ฒ๐˜ƒ๐—ฒ๐—ฟ๐˜† ๐—ฒ๐—ป๐—ด๐—ฎ๐—ด๐—ฒ๐—บ๐—ฒ๐—ป๐˜. No juniors on client code.
โ€ข ๐—™๐—ถ๐—ป๐—ฑ๐—ถ๐—ป๐—ด๐˜€ ๐—ฏ๐—ฒ๐—ณ๐—ผ๐—ฟ๐—ฒ ๐˜๐—ต๐—ฒ ๐—ณ๐—ถ๐—ป๐—ฎ๐—น ๐—ฟ๐—ฒ๐—ฝ๐—ผ๐—ฟ๐˜. Confirmed critical issues go to the client the same day.
โ€ข ๐—ฅ๐—ฎ๐—ป๐—ธ๐—ฒ๐—ฑ ๐—ฎ๐—ป๐—ฑ ๐—ฎ๐—ฐ๐˜๐—ถ๐—ผ๐—ป๐—ฎ๐—ฏ๐—น๐—ฒ. Every finding is severity-ranked and comes with a fix.
โ€ข ๐—ช๐—ฒ ๐—ฟ๐—ฒ-๐—ฐ๐—ต๐—ฒ๐—ฐ๐—ธ ๐˜๐—ต๐—ฒ ๐—ณ๐—ถ๐˜…๐—ฒ๐˜€. Patches are reviewed before the client ships.
โ€ข ๐—ฃ๐—ฟ๐—ผ๐—ผ๐—ณ ๐—ผ๐˜ƒ๐—ฒ๐—ฟ ๐—ฐ๐—ฟ๐—ฒ๐—ฑ๐—ฒ๐—ป๐˜๐—ถ๐—ฎ๐—น๐˜€. We care what you have done, not what your CV says.

It is a high-standards environment. The bar is high, the feedback is direct, and the people around you are strong.

๐——๐—ผ๐—ป'๐˜ ๐˜€๐—ฒ๐—ฒ ๐˜†๐—ผ๐˜‚๐—ฟ ๐—ฟ๐—ผ๐—น๐—ฒ?
Our open roles are not the whole picture. If you are excellent at something that makes protocols safer and we do not have a role for it yet, tell us. If it impresses us, we will build the role around you.

We are especially interested in people who fit one of these areas, but we are open to others:

โ€ข Smart contract auditing (EVM or SVM)
โ€ข Fuzzing, invariant testing and formal verification
โ€ข Security research and exploit analysis
โ€ข Tooling and AI-assisted analysis
โ€ข Technical writing and report quality
โ€ข Client-facing security work and protocol design review

๐—ช๐—ต๐—ฎ๐˜ ๐˜„๐—ฒ ๐—ฒ๐˜…๐—ฝ๐—ฒ๐—ฐ๐˜ ๐—ณ๐—ฟ๐—ผ๐—บ ๐˜†๐—ผ๐˜‚:
โ€ข ๐—ฃ๐—ฟ๐—ผ๐—ผ๐—ณ ๐—ผ๐—ณ ๐˜†๐—ผ๐˜‚๐—ฟ ๐˜„๐—ผ๐—ฟ๐—ธ: contest results, bounty payouts, published reports, open-source code, research or write-ups we can read.
โ€ข A clear idea of where you would add value, and what you would want to own.
โ€ข Honesty about your level. We would rather know exactly what you are great at.
โ€ข The ability to work independently and communicate clearly in a remote team.

๐—” ๐—ฝ๐—น๐˜‚๐˜€ ๐—ถ๐—ณ ๐˜†๐—ผ๐˜‚ ๐—ต๐—ฎ๐˜ƒ๐—ฒ:
โ€ข A public track record under your own name.
โ€ข Experience across more than one chain or stack.
โ€ข Something you have built that other security people actually use.

๐—ช๐—ต๐—ฎ๐˜ ๐˜†๐—ผ๐˜‚ ๐—ด๐—ฒ๐˜ ๐—ณ๐—ฟ๐—ผ๐—บ ๐˜‚๐˜€:
โ€ข Fully remote work with a small team of senior security people.
โ€ข Real protocols and real stakes.
โ€ข A quality-first culture with direct feedback and strong peers.
โ€ข A real chance to shape your own role if we are a fit.
โ€ข Competitive compensation.

Tell us a bit more about yourself

Anything else we should know?

Upload your resume and cover letter

How did you hear about this job?

If a current employee at (company) referred you, please list his/her name

When can you start?