Careers

Security Team Roles

Cyproli is a web3 security company with a narrow mission: make avoidable loss in crypto teams measurably rarer. Most digital-asset security work stops at the smart-contract audit and walks away. We close the gap between a piece of advice and a team that actually follows it under pressure. That means security team members here work on the full stack of controls: signer hygiene, hot and cold wallet tiering, approval and allowance drift, bridge relayer controls, route isolation, replay domain design, rate-limit circuit breakers, pause and upgrade governance, timelock and admin control design, and the incident-response playbooks that tie them together.

We are currently interested in product-minded security engineers, protocol researchers, and operators. A strong candidate can reason about where a protocol can fail in production, write guidance a small team can execute, and respond during a live incident without panic. Formal titles matter less than demonstrated judgment about what reduces the probability of funds being lost.

How We Work

Cyproli treats security as a system: prevention, detection, containment, and recovery should support each other. That is why the public site is organized into connected research clusters rather than disconnected posts, and why our client work is structured as policies and runbooks a team can adopt next week rather than a stack of theoretical threat models.

We keep the team lean because incident and design work depends on shared context. A reviewer who understands your wallet architecture can answer a follow-up about your bridge watchers without a full re-brief. That continuity is why engagements with us tend to be shorter to stand up and faster to produce adoptable output.

Current Openings

We are currently interested in product-minded security engineers, protocol researchers, and operators who can work across research, tooling, and live incident-focused environments. Reach out even if there is not a public role listed yet — we consider strong candidates continuously and shape scope around the person.

If you are interested in a web3 security career at Cyproli, email us with a short note about what you have built or broken in crypto security, the risk surface you care about most, and how you prefer to work. We respond to serious candidates, including people who have not held a formal security title before.

Frequently Asked Questions

What web3 security roles is Cyproli hiring for?

Cyproli is interested in product-minded security engineers, protocol researchers, and security operators who can work across research, tooling, and live incident-focused environments. We are deliberately small and senior, and we consider strong candidates even when no specific role is listed publicly.

What do crypto security jobs at Cyproli focus on?

Our work centers on the highest-cost failure surfaces in Web3: wallet and signer security, cross-chain bridge design, smart-contract control design, and the operational policies that make those controls stick under pressure. Roles are scoped around practical risk reduction rather than checkbox audits.

What is it like to work at Cyproli?

Cyproli is a small senior team. The people who write the research are the same people who design controls and respond to client questions, so context is never lost in handoff. We treat security as a system of interlocking controls and hold every piece of work to one question: does it reduce the probability of funds being lost or a recovery being delayed.

How do I apply for a position at Cyproli?

Reach out through the contact page. Include what you have built or broken in Web3 security, the risk surface you care about most, and how you prefer to work. We respond to serious candidates even when there is no public role listed yet.