Smart Contract Auditor

XamDesign is a specialized design agency and strategy studio operating at the intersection of Web3, DeFi, and digital innovation. We partner with fast-growing blockchain protocols, crypto startups, and tech ventures to build secure, high-performing digital products and innovative Web3 solutions.

About the role

As we expand our Web3 security capabilities, we are seeking an experienced Smart Contract Auditor to review and assess the security, reliability, and functionality of smart contracts across DeFi and blockchain ecosystems. The ideal candidate combines strong Solidity expertise, deep knowledge of EVM-based protocols, and a security-first mindset to identify vulnerabilities before they can be exploited.

This is a fully remote position.

Responsibilities

• Conduct comprehensive manual and automated security reviews of Solidity smart contracts and Web3 protocols.
• Identify security vulnerabilities, logic flaws, access-control issues, economic exploits, and other potential attack vectors.
• Review lending, staking, DEX, liquidity, yield, governance, and other DeFi protocols.
• Analyze smart-contract architecture, business logic, integrations, upgrade mechanisms, and external dependencies.
• Utilize tools such as Slither, Foundry, Hardhat, Echidna, and other security frameworks to identify potential vulnerabilities.
• Perform detailed line-by-line analysis of critical smart-contract components and investigate complex attack scenarios.
• Develop proof-of-concept exploits where appropriate to demonstrate the impact and severity of identified vulnerabilities.
• Produce clear and detailed security reports outlining vulnerabilities, severity levels, technical impact, and recommended remediation steps.
• Work with developers to review fixes and confirm that identified vulnerabilities have been properly addressed.
• Monitor emerging smart-contract exploits, attack techniques, protocol vulnerabilities, and developments in blockchain security.

Requirements

• 3+ years of professional experience in smart-contract development, blockchain security, or smart-contract auditing.
• Strong hands-on experience with Solidity and EVM-compatible blockchains.
• Proven experience conducting security audits of smart contracts or DeFi protocols.
• Deep understanding of common smart-contract vulnerabilities, including reentrancy, access-control issues, oracle manipulation, flash-loan attacks, price manipulation, and logic flaws.
• Strong knowledge of DeFi protocols and blockchain architecture.
• Experience with security and development tools such as Foundry, Hardhat, Slither, Echidna, or similar.
• Ability to perform both automated and manual code reviews.
• Experience creating detailed technical audit reports.
• Strong analytical and problem-solving skills.
• Ability to understand complex protocol architectures and identify potential attack vectors.
• Strong written and verbal communication skills in English.
• Ability to work independently in a fast-moving, fully remote Web3 environment.

Benefits

• Competitive Annual Salary: $150,000 – $180,000, plus performance-based bonuses.
• 100% Remote Work with flexible hours and operational autonomy.
• Direct interaction with Web3 founders, protocol teams, developers, and industry-leading security researchers.
• Access to cutting-edge Web3 security projects across DeFi, blockchain infrastructure, and digital assets.
• High-impact technical role within a growing Web3 design and strategy agency.