<h2>Security Analyst (🌎 Remote, per-project)</h2>We are looking for per-project Security Auditor who should have extensive knowledge in cybersecurity, including expertise in frontend and backend security, and proficiency in JavaScript and Rust for auditing SDKs.Must be experienced in web3 security, skilled in risk management and adept at identifying and fixing vulnerabilities. The role demands a proactive approach to enhancing security processes and sharing reports with the development team.<h3>🏛️ About Streamflow</h3><a target="_blank" rel="noopener noreferrer nofollow" href="https://streamflow.finance/">Streamflow</a> is the distribution layer of Web3.With ~$700 million in TVL and over $700+ million distributed, we are the permissionless, open, on-chain token streaming protocol used by hundreds of clients across five chains.Our team is globally distributed and agile.Our treasury is well-funded, and we have been profitable for several months.We are excited to scale and launch some huge initiatives over the coming months and need creative, reliable, and driven operators.<h2>🌟Job Description:</h2>The Per-Project Security Auditor for Streamflow is tasked with conducting a thorough one-time audit to identify potential security vulnerabilities within various components of the Streamflow project. Key responsibilities include:<ol><li>Frontend Application Security Analysis: Analyze user-facing features, such as vesting, payments, and token locking, for security flaws. <a target="_blank" rel="noopener noreferrer nofollow" href="https://app.streamflow.finance/">https://app.streamflow.finance/</a></li><li>JS SDK Security Assessment: Perform a detailed security audit of the JavaScript (Typescript) SDK, assessing potential vulnerabilities in its interaction with blockchain protocols. <a target="_blank" rel="noopener noreferrer nofollow" href="https://github.com/streamflow-finance/js-sdk">https://github.com/streamflow-finance/js-sdk</a></li><li>Backend Applications Security Review: Evaluate the security of three backend applications (Python), identifying potential weaknesses in data handling and protection:<ol><li>Contract manipulation (Vesting, Payment, Token-Locking)</li><li>Airdrop manipulation (Instant, Vested)</li><li>Authentication</li><li>Address book</li><li>KYC</li><li>Team Dashboard</li></ol></li><li>Rust SDK Security Oversight: Conduct a comprehensive audit of the Rust SDK used for on-chain program integrations, identifying any security issues. <a target="_blank" rel="noopener noreferrer nofollow" href="https://github.com/streamflow-finance/rust-sdk">https://github.com/streamflow-finance/rust-sdk</a></li><li>Process Enhancement and Risk Management: Help in developing and refining security processes related to team operations and treasury management, identifying potential flaws and suggesting improvements.</li><li>Reporting and Collaboration: Provide comprehensive reports on audit findings and work closely with the development team for prioritizing and addressing security issues.</li></ol><hr>Bonus:<ol><li>Perform fix of the flaws found in the section above</li></ol><h2>🤝 Why You Should Join Us</h2>Values: Streamflow is built on the values of customer focus, respect, ownership, proactivity, and a growth mindset (internally known as CROP-G values).We live by these qualities in our day-to-day and prioritize a happy and performant team. Therefore, it’s especially important that new teammates align closely with these values.Work culture: Fast moving, engaging, and ambitious. We passionately believe in the value that our protocol can unlock for the world and we’re looking to work with mission driven people who are ready to jump onboard with us, roll up their sleeves and get stuck into it. We believe in selfless sharing of knowledge, transparency and insight into all aspects of the business and personal initiative.Team organization: We are a remote-first, office-optional team with a physical office in Belgrade, Serbia, that prioritizes high-quality written communication and the possibility of working asynchronously across time zones because we believe that the best talent exists on every corner of the earth.<h1>💵&nbsp;Compensation</h1>Streamflow is developing an innovative compensation system to:<ul><li>Align long-term incentives among core team members.</li><li>Tie compensation with individual performance.</li><li>Tie compensation with company performance.</li></ul>

Streamflow Finance - Security Analyst

Streamflow Finance - Security Analyst