Careers

How these roles are paid

Open roles

• Security·Remote·Freelance · per contest

  Whitelisted Technical Scoper and Quoter

  Read a codebase, decide what a contest should cover, how long it should run and what it should cost.

  Pays 1% of the total budget of every contest you are brought in on: $563 on the smallest contest we run, $600 when it is bundled with a pre-launch bug bounty, and more as budgets grow.

  Read the full descriptionHide the full description↓

  Every contest starts with a judgement call: what is in scope, how big it really is, how long guards need on it, and what prize pool that justifies. We size Solidity work in nSLOC, but the protocols that reach us are written in plenty of other things, and a Solana program or a Cairo contract is not sized by counting lines. This role makes that call, across ecosystems, and turns it into a quote a protocol team can sign. This is a whitelisted role: you join the pool we pick from, and we bring you in for the contests that match you. Being whitelisted does not guarantee a contest.

  What you will do

  • ·Read the codebase and the docs, and draw the scope boundary: what is reviewed, what is not, and at which commit.
  • ·Size the work and set the contest length.
  • ·Set the prize pool and produce the quote.
  • ·Join the technical part of sales calls and answer a protocol team's questions about coverage.

  What we are looking for

  • ·You have reviewed smart contracts professionally, whether at a firm, in contests, or both.
  • ·You can scope and quote projects in at least one protocol type and ecosystem.
  • ·You can tell a big codebase from a complex one, and say which needs more time.
  • ·You can write a scope and a quote that hold up in front of a protocol team.
  • ·You are comfortable being paid on results, with no retainer.

  Nice to have

  • ·Experience scoping competitive security reviews.
  • ·Public findings, contest results or reports we can read.

  This is a judgement role, not a sales one. You do not have to source protocols or chase deals; you decide what the work is and what it costs.

  Apply for this role
• Operations·Remote·Freelance · per contest

  Whitelisted Contest Manager, QA and Customer Success

  The DualGuard operator on every contest: set it up, keep it running cleanly, and make sure the protocol team gets a report they can act on.

  Pays 1% of the total budget of every contest you are brought in on: $563 on the smallest contest we run, $600 when it is bundled with a pre-launch bug bounty, and more as budgets grow.

  Read the full descriptionHide the full description↓

  A contest has a lot of moving parts: a frozen scope, a channel full of guards with questions, two Lead Judges, a Supreme Judge, and a protocol team waiting on a report. The Contest Manager is the person who holds them together. You set the contest up, keep it running cleanly while it is live, and work with the judges on the final report. You are also the protocol team's point of contact from kickoff to delivery. This is a whitelisted role: you join the pool we pick from, and we bring you in per contest. Being whitelisted does not guarantee a contest.

  What you will do

  • ·Set up the contest repository: the agreed scope, at the agreed commit, with the documentation guards need.
  • ·Supervise the contest channel and answer project-related questions, bringing in the protocol team when only they can answer.
  • ·Keep the contest running cleanly: timelines, rules and access, and catching problems before they reach guards or the client.
  • ·Check the contest before it opens and the report before it goes out: scope, rules, severities and wording.
  • ·Work closely with the Supreme Judge and the Lead Judges on the final report.
  • ·Be the protocol team's point of contact from kickoff through the Mitigation Review and delivery of the report.

  What we are looking for

  • ·You are at home in Git and GitHub, and read enough smart contract code to set up a scope and follow a finding.
  • ·You write clearly to technical people, and stay calm when a channel gets loud.
  • ·You are organized: deadlines, checklists and loose ends are what you are good at.

  Nice to have

  • ·Experience running or supporting contests, audits or bug bounties on another platform.
  • ·A security background: you do not need to be a researcher, but it helps to think like one.

  This is an operations role, not a judging one: severities are decided by the Lead Judges. You make sure the process around them runs cleanly and the report reads well.

  Apply for this role
• Security·Remote·Freelance · per contest

  Whitelisted Lead Guard

  Join the pool of researchers we pick from to lead contests: one of the two Lead Guards anchoring a review whose stack matches yours.

  Pays 15% of the prize pool of every contest you are brought in on, not guaranteed: $6,750 on the smallest pool we run. Every rank you drop costs you 1.5% of the pool, so finishing outside the top 10 leaves you with none of it. When a pre-launch bug bounty follows, the payout is held until it ends and depends on what the bounty finds.

  Read the full descriptionHide the full description↓

  Every DualGuard contest is anchored by two Lead Guards, senior researchers whose skills match the protocol under review. For now we hand-pick them, from a whitelist of researchers with strong track records on other platforms. Being whitelisted does not guarantee a contest: it means you are considered for every contest that matches your languages and protocol types, and invited when you are the right fit.

  What you will do

  • ·Lead the review of a contest's frozen scope alongside a second Lead Guard, with the wider network of guards competing in parallel.
  • ·Cover the protocol in depth.
  • ·Review the protocol team's fixes in the Mitigation Review, provided you rank in the top 10 of the contest's leaderboard.

  What we are looking for

  • ·A strong, public track record in competitive security reviews or bug bounties: top spots and public findings.
  • ·Depth in at least one ecosystem and one protocol type, such as Solidity lending or Rust on Solana.
  • ·Able to commit to a contest's full window when you accept one.

  Nice to have

  • ·Experience as a lead security researcher on other contest platforms.
  • ·Coverage across more than one language, which widens the contests you match.

  As the leaderboard shapes up

  As time goes by and the DualGuard leaderboard shapes up, Lead Guards will be chosen from it, filtered to the protocol under review. To be a Lead Guard, you will then need to pass 2 criteria:

  1. Compete for at least 42 days on DualGuard in each of the specs found in the protocol that will be reviewed.
  2. Be inside the top 5 of the corresponding leaderboard.

  Until then, the whitelist is how we staff contests.

  Apply for this role
• Security·Remote·Freelance · per contest

  Whitelisted Lead Judge and Triager

  Join the pool we pick from to judge contests: one of the two Lead Judges who validate, group and rate every finding, and triage the pre-launch bug bounty that follows.

  Pays 6% of the prize pool of every contest you are brought in on, guaranteed: $2,700 on the smallest pool we run. When a pre-launch bug bounty follows and you triage it too, it pays an additional 2% of the total budget, which brings it to $3,900 on the same pool.

  Read the full descriptionHide the full description↓

  Every DualGuard contest is judged by two Lead Judges whose skills match the protocol under review, so no finding rests on a single opinion. For now we hand-pick them, from a whitelist of judges with strong track records on other platforms. Being whitelisted does not guarantee a contest: it means you are considered for every contest that matches your languages and protocol types, and invited when you are the right fit.

  What you will do

  • ·Judge your half of the submissions, split between the two Lead Judges at random: validate findings, group duplicates, assign severity, and write the reasoning behind every call.
  • ·Review the other Lead Judge's decisions and escalate the ones you think are wrong, consulting the Supreme Judge when you cannot reach agreement.
  • ·Re-review the escalations guards raise, and finalize the contest results.
  • ·Judge the AutoGuard contest, where AI agents and static analyzers compete before the guard contest.
  • ·Evaluate the issues reported during the Mitigation Review and communicate them to the protocol team.
  • ·Triage the pre-launch bug bounty's submissions when one follows the contest.

  What we are looking for

  • ·A strong track record as a judge or senior reviewer on other contest platforms or bug bounty programs.
  • ·You write clear, defensible reasoning for severity calls, including the close ones.
  • ·You follow the judging rules while using your common sense at all times.

  Nice to have

  • ·Coverage across more than one language or ecosystem, which widens the contests you match.
  • ·Experience triaging live bug bounty reports.

  As the leaderboard shapes up

  As time goes by and the DualGuard judging leaderboard shapes up, Lead Judges will be chosen from it, filtered to the protocol under review. To be a Lead Judge, you will then need to pass 3 criteria:

  1. Compete as a judge for at least 42 days on DualGuard in each of the specs found in the protocol that will be reviewed.
  2. Be inside the top 5 of the corresponding Judging Leaderboard.
  3. You cannot judge a contest you competed in.

  Until then, the whitelist is how we staff judging. Judges follow DualGuard's judging conduct guidelines, which include keeping judging discussions off public channels.

  Apply for this role

Compete as a guard

Guards are independent security researchers who compete in our contests and are paid for verified, exploitable findings, judged on impact. There is no application to sit through: create an account on the platform, join the Discord where contests are announced, and enter the next one. Lead Guards are selected from the researchers ranked highest on the leaderboard.