Smart Contract Auditor Job Description Template

The smart contract auditor reviews contract code to find the vulnerabilities before an attacker does. The work combines line by line reading, threat modeling, invariant testing and a good memory for how previous exploits worked, because most incidents reuse a known pattern in a new context. The role requires being right in detail and being able to explain a finding clearly enough that the team actually fixes it correctly.

Typical Duties and Responsibilities

• Review smart contract code for security vulnerabilities and logic errors
• Build threat models covering economic and technical attack paths
• Write invariant, fuzz and property based tests to probe assumptions
• Assess integration risk with oracles, bridges and external protocols
• Reason about MEV, front running and transaction ordering exposure
• Produce audit reports with clear severity ratings and reproduction steps
• Review remediation and confirm that fixes are complete
• Track new vulnerability classes and exploits across the industry
• Advise teams on secure design before code is written
• Contribute to internal tooling and audit methodology

Education

• Bachelor’s degree in computer science or equivalent practical experience

Required Skills and Experience

• 2+ years auditing smart contracts or an equivalent security background
• Deep knowledge of vulnerability classes and real world exploit case studies
• Fluency reading Solidity, and ideally Rust or Move as well
• Experience with fuzzing and invariant testing tools such as Echidna or Foundry
• Understanding of DeFi mechanics including lending, AMMs and liquidations
• Precise technical writing for audit reports
• Adversarial mindset and patience with detailed code review
• Public audit reports, competitive audit results or disclosed findings

Preferred Qualifications

• Formal verification experience
• Track record in competitive audit platforms or bug bounties