Profile
snjax
We are looking full-stack (mostly front-end) developer for a rating system for informational security auditors.
This is a general web application with some kind of decentralization. It should look like https://gitcoin.co with GitHub integration and focused on informational security auditors of smart contracts.
An information security audit is a deterministic procedure:
1. The client asks for the audit from the auditor and provides to the auditor the scope (list of files) and git commit hash.
2. The auditor makes the report with a list of issues. The client fix the issues and provide comments to the auditor
3. The auditor check fixes and comments and provide the final report to the client
Here is an example of an audit: https://github.com/ConsenSys/Uniswap-audit-report-2018-12/blob/master/Uniswap-final.md
The system should be as much decentralized as it could be. Generally, payments for audits are processed in blockchain, so we will not manage payments. But we should provide a rating system based on payments (could be obtained from blockchain) and reviews of clients and auditors.
The first version could be the most simple as it could be: with only mapping between blockchain addresses and accounts, ratings, and links to the audits. Additional things like automatic scoping, lines of code counting, different metrics for auditors could be implemented later.
The developer should have a good product vision and implement simple and useful services. Experience with basic cryptography, blockchain (as a user), decentralization (IPFS, etc) could be preferable.
PS.
Our team is Russian-speaking (and worldwide located), so knowledge of the Russian language is preferable, but not necessary.