Compliance Engineer

CertiK is a leading Web3 security firm founded in 2017 and backed by top-tier investors including Coatue, Goldman Sachs, and Sequoia Capital. The company applies formal verification, AI-powered technology, and rigorous security research to protect blockchain protocols, smart contracts, and decentralized applications. With teams across North America, Asia, and Europe, CertiK serves thousands of enterprise clients and Web3 projects globally.

The Compliance team is seeking a hands-on engineer to serve as the first-line compliance owner for AI-generated outputs and client deliverables. You'll be the bridge between raw AI analysis and accurate, submission-ready compliance work—turning complex regulatory frameworks into clear guidance for client-facing teams and commercial services.

What you'll do

• Analyze and break down regulatory frameworks and licensing requirements, then map them into structured formats and checklists for clients and internal teams.

• Lead scoping, applicability analysis, gap assessment, evidence collection, and remediation tracking on licensing and regulatory-readiness projects from start to finish.

• Review AI outputs for regulatory accuracy, evidence support, source traceability, and client appropriateness before delivery, catching hallucinations and unsupported claims.

• Convert messy, unstructured requests into clear project scopes and polished deliverables including compliance analyses, mapping documents, and review reports.

• Partner with Engineering to build reusable regulatory mappings, templates, review rules, and structured AI workflows that reduce manual work over time.

• Escalate high-risk regulatory interpretations and final legal conclusions to senior reviewers or Legal when needed.

What you'll bring

• At least 3 years in compliance, regulatory consulting, digital assets, fintech, or law firm work—hands-on experience with regulatory analysis and evidence review.

• Track record completing at least one full licensing application, regulatory registration, or end-to-end regulatory-readiness project.

• Ability to write clear guidance, client presentations, and regulatory reports; strong cross-functional project management and client communication skills.

• Comfort managing urgent, ambiguous requests from client-facing teams while maintaining output quality.

• Fluent English (professional Chinese proficiency is preferred but not required).

• Working knowledge of LLM limitations, hallucination risk, and human-in-the-loop review processes.

Nice to have

• Familiarity with digital-asset regulation, VASP licensing frameworks, or similar regulatory regimes.

What we offer

• Remote work across Europe and Asia (this role cannot be performed from the United States).

• Full-time position with a globally distributed, security-focused team.