We are looking for interns join our team. You'll work alongside our security researchers on real engagements—reviewing code, finding vulnerabilities, and learning how world-class security reviews are done. You'll also have the opportunity to pursue independent research.
About Us
Zellic is a high-end security research and consulting firm. We solve our clients’ toughest security problems, serving leading blockchain and cryptocurrency companies.
Our team is comprised of the world’s most talented hackers—ranking #1 on CTFTime in 2020, 2021, and 2023. Our expertise in cryptography, embedded systems, low-level exploitation, and finance has earned us the reputation as the go-to firm in the space.
We’re 100+ people across 28 countries, fully remote, and consistently profitable.
What You'll Do
- Shadow researchers on real client audits across a wide range of targets—compilers, virtual machines, web apps, databases, circuits, proof systems, and more
- Perform vulnerability research under mentorship
- Contribute to blog posts and internal research
- Suggest and pursue your own research projects
Qualifications
You should have demonstrable skills in at least one security domain—whether through CTFs, independent research, or personal projects. We're looking for people who can point to something they've built, broken, or figured out.
We value experience the following areas:
- Pwn. Finding and exploiting vulnerabilities in native software. You know the AFL++ command line parameters by heart. We especially value browser exploitation, kernel exploitation, or virtual machine escapes.
- Web. Breaking web applications. You believe CSP stands for “Client Side Puzzle”. You find and abuse logic bugs and design flaws. You have a track record as a bug bounty veteran.
- Cryptography. Attacks, protocol design, and secure implementation. You enjoy diving into and reimplementing a paper. Strong math background paired with broad knowledge of important primitives. Knowledge of hash-based crypto or lattices is a plus.
- Reverse Engineering. Decompilation, program analysis, formal methods, and programming languages. You love Z3 and SSA form. You can take apart anything and aren’t afraid to tackle an obfuscated VM.
- Misc. You intimidate software into finding bugs in itself, simply by looking at it.
Blockchain experience is not required.