Compliance Engineer

Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.

Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.

• Analyze and decompose regulatory frameworks and licensing requirements.
• Support licensing and regulatory-readiness projects, including scoping, applicability analysis, gap assessment, evidence requests, policy review, application preparation, and remediation tracking.
• Conduct first-line review of AI outputs for regulatory accuracy, evidence support, source traceability, and client suitability.
• Convert unstructured requests into clear scopes and deliverables, including compliance analyses, and review reports.
• Support compliance guidance, evidence checklists, submission-material mapping, and licensing deliverables.
• Work as/with Engineering to build regulatory mappings, templates, review rules, evaluation cases, and structured AI workflows.
• Escalate high-risk regulatory interpretations and final legal or compliance conclusions to senior reviewers or Legal.

• 3 or more years of Engineering experience in compliance, regulatory consulting, digital assets, fintech, financial services, compliance audit, or a law firm.
• Hands-on experience with at least 1 licensing application, regulatory registration, or end-to-end regulatory-readiness project.
• Strong understanding of regulatory analysis, evidence review, and licensing documentation.
• Ability to produce clear guidance, mappings, presentations, and client reports.
• Strong client communication and cross-functional project-management skills.
• Ability to manage urgent and ambiguous requests from client-facing team while maintaining quality.
• Strong written and spoken English; professional Chinese proficiency is preferred but not required.
• Familiarity with digital-asset regulation, VASP licensing or similar frameworks is preferred.
• Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review.

This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.