Lead Blockchain Security Developer (Canton)

<div class="content-intro"><h3><strong>About us</strong></h3> <p>OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research.</p> <p>Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap.</p> <p>We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle.</p> <p><span style="font-weight: 400, style=;"><strong>Please note:</strong> Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information.</span></p></div><h3>The Secure Development team ❤️</h3> <p>OpenZeppelin is the security partner of choice for the most important protocols in Web3. Our Secure Development team sits at the intersection of building and breaking: we design, implement, and harden production-grade libraries and smart contracts for leading projects across EVM, Starknet, Stellar/Soroban, Arbitrum Stylus, Aptos, and beyond, often as an embedded extension of the client's engineering team.</p> <p>We work the way the rest of the industry will five years from now. Every developer on the team is a fully AI-native engineer, supported by outstanding internal AI tooling built for every phase of secure development. Developers own their workstreams end-to-end — agents amplify their effectiveness, and peers, security researchers, and external auditors provide rigorous review on every piece of work that ships.</p> <h3>The Canton Network engagement</h3> <p>This role joins us at the start of a groundbreaking <a href="https://github.com/canton-foundation/canton-dev-fund/blob/main/proposals/2026-04-OpenZeppelin-canton-ecosystem-stack.md">24-month, multi-million-dollar commitment </a>to build the open-source DeFi foundations of the world's most institutional blockchain. You'll deliver production-ready Reference Implementations (privacy-preserving DEX, lending, cross-chain stablecoin settlement, confidential auction launchpad, and more), the OpenZeppelin Contracts Library for Daml that Canton developers will import, and Canton standards implementation.</p> <h3>Within this, you will:</h3> <ul> <li><span style="font-weight: 400;">Own the development of the OpenZeppelin Contracts Library for Daml end-to-end:&nbsp;vaults, hooks, RBAC, credentials, messaging gateway, accounts, and more. The audited primitives Canton developers will import.</span></li> <li><span style="font-weight: 400;">Lead the technical design and implementation of the year-1 Reference Implementations: privacy-preserving DEX, lending protocol, cross-chain stablecoin settlement, and confidential auction launchpad.</span></li> <li><span style="font-weight: 400;">Implement and shepherd the OZ Daml versions of CIP-56, CIP-86, CIP-103, and CIP-104. Coordinate with Digital Asset on spec evolution and with ChainSafe on middleware alignment.</span></li> <li><span style="font-weight: 400;"><span style="font-weight: 400;">Run client-facing roadmap, design, and milestone discussions with Digital Asset, the Canton Foundation, and ChainSafe.</span></span></li> <li><span style="font-weight: 400;">Collaborate with OpenZeppelin's auditors and security researchers on threat models, audit prep, and full-stack reviews for every Reference Implementation.</span></li> <li><span style="font-weight: 400;">Use AI systems as core daily tools. Extend them: build agents, skills, and workflows that compound the team's leverage on the Canton engagement and beyond, including in security practices</span></li> <li><span style="font-weight: 400;">Contribute developer-experience and security feedback upstream into the Canton protocol, Splice, the Daml SDK, and the Splice Wallet Kernel.</span></li> <li><span style="font-weight: 400;">Conduct open-ended research around privacy-preserving DeFi, multi-party authorization patterns, and Canton-specific primitives; you'll have time to publish and contribute back to OpenZeppelin's body of knowledge.</span></li> </ul> <h3>Location</h3> <p>OpenZeppelin is a fully remote organization, however candidates for this position must be located within UTC-8 to UTC+3 time zones to be considered.</p> <h3>You have</h3> <ul> <li><span style="font-weight: 400;"><strong>Production Daml fluency</strong>. You understand templates, choices, controllers/observers/signatories, multi-party authorization, sub-transaction views, and propose/accept patterns as first-class primitives. Running an SV, contributing to Splice internals, governance, or Canton Coin tokenomics.</span></li> <li><span style="font-weight: 400;"><strong>3+ years of experience in UTXO-based protocol development </strong>(Canton, Cardano, Midnight, Zcash, Aleo, Mina, or similar).</span></li> <li><span style="font-weight: 400;"><strong>3+ years of experience on DeFi engineering in production</strong>. AMMs, vaults (ERC-4626 or equivalent), lending protocols, cross-chain settlement.</span></li> <li><span style="font-weight: 400;"><strong>A security-first mindset</strong>.&nbsp;this is non-negotiable. You have demonstrable experience either auditing, breaking, or hardening production systems — published threat models, audit reports, responsible disclosures, or equivalent output.</span></li> <li><span style="font-weight: 400;"><strong>Library / SDK API design taste</strong>.&nbsp;You've built reusable, import-first developer libraries, not just applications. You have opinions on extensibility patterns (hooks, modular components, override points) and on what makes an audited primitive <em>pleasant</em> to consume.</span></li> <li><span style="font-weight: 400;"><strong>Cross-chain interoperability exposure</strong>.&nbsp;Production work with at least one major cross-chain messaging protocol (Chainlink CCIP, LayerZero, Wormhole, Axelar, or similar).</span></li> <li><span style="font-weight: 400;"><strong>Institutional / compliance design fluency</strong>: You can design with credential gates, multi-party attestation, custody flows, and compliance hooks as native constraints.</span></li> <li><span style="font-weight: 400;"><strong>An AI-native workflow</strong>. Claude Code, Cursor, or equivalent is your daily driver. You have measurable productivity gains to show for it and clear opinions on how to use these tools well. You have shipped at least one non-trivial AI-powered tool, agent, or automation pipeline in production using the Anthropic SDK, MCP, custom evals, or comparable.</span> AI is a serious instrument in your security workflows.</li> </ul> <h3>Nice to have</h3> <p><strong> </strong></p> <ul> <li><strong><span style="font-weight: 400;"><strong>Cryptography or financial-engineering background</strong>.</span></strong></li> <li><span style="font-weight: 400;"><strong>Institutional finance background</strong>. Capital-markets microstructure, custody, compliance flows, RWA tokenization, settlement.</span></li> <li><span style="font-weight: 400;"><strong>Hands-on experience with other non-EVM ecosystems</strong>. Starknet, Stellar/Soroban, Arbitrum Stylus, Aptos, Move-based chains.</span></li> <li><span style="font-weight: 400;"><strong>Open-source contributions</strong> to widely-used libraries in the smart-contract or AI-tooling space.</span></li> </ul> <h3>Logistics</h3> <p>Our interview process is designed to be fast (we target ~30 days from first call to offer) while still giving both sides a clear "yes." The full process consists of:</p> <ul> <li><span style="font-weight: 400;">Recruiter interview (30-45 minutes)</span></li> <li><span style="font-weight: 400;">Manager interview (60 minutes)</span></li> <li><span style="font-weight: 400;">Team interview (45 minutes)</span></li> <li><span style="font-weight: 400;">Paid technical work trial</span></li> </ul> <p><span style="font-weight: 400;">Please let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance.</span></p> <p>&nbsp;</p><div class="content-conclusion"><section class="j-content"> <div class="container"> <h3 class="requirements"><strong>Benefits</strong></h3> <ul> <li><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Company in-person gatherings in different locations around the world 😎</span></li> <li style="font-weight: 400;"><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Fully remote work 🌎</span></li> <li><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Flexible time off 🏝</span></li> <li style="font-weight: 400;"><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Paid parental leave 💙</span></li> <li style="font-weight: 400;"><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">One time work-from-home equipment stipend of up to $500 USD 🪑</span></li> <li style="font-weight: 400;"><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Medical insurance coverage 🏥</span></li> <li style="font-weight: 400;"><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Learning &amp; Development opportunities 🧠</span></li> <li style="font-weight: 400;"><span style="font-weight: 400; font-family: helvetica, arial, sans-serif;">Work with a global team in a fast-growing industry 🚀</span></li> </ul> <p class="job-description"><span style="font-family: helvetica, arial, sans-serif;"><span style="font-weight: 400;">At </span><strong>OpenZeppelin</strong><span style="font-weight: 400;">, we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us!</span></span></p> <h3>Use of AI as part of the recruiting process</h3> <p>As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s <a href="https://www.openzeppelin.com/privacy">Data Privacy Notice</a>.</p> <p>If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.</p> </div> </section></div>