Skip to content
Quantix Security Labs

The research structure.

Quantix is described here by role rather than by person: 6 roles leading 6 teams, each with a defined remit, the expertise it requires and the services and products it is accountable for.
Illustration of the research structure: a compass at the centre for research leadership, linked to five pedestals for contract assessment, formal methods, infrastructure, threat intelligence and security operations.

Organisation

Select a role to see what it owns.

Team leads report to the Head of Security Research. Close working relationships across teams are marked when a role is selected.

Security Research

Head of Security Research

Owns the research agenda, the assessment methodology and the quality bar every Quantix report must meet. Final reviewer for severity disputes and publication decisions.

Reports to: Leads the research structure

Full role profile

Responsibilities

  • Sets research priorities across smart contracts, infrastructure and threat intelligence
  • Maintains the seven-stage methodology and the severity rubric
  • Chairs the peer-review step for critical and high findings
  • Approves the publication of research and technical reports
  • Coordinates responsible disclosure when research affects third parties

Works closely with

Role profiles

Remit, stack and research directions.

Each profile lists the specialisation and technical stack the role relies on, the research it pursues outside engagements, and where it sits in the reporting line.
Emblem for research leadership: a compass dial whose needle and bearing lines point to three research directions.

Security Research

Head of Security Research

Owns the research agenda, the assessment methodology and the quality bar every Quantix report must meet. Final reviewer for severity disputes and publication decisions.

Specialisation
  • Protocol security architecture
  • Vulnerability research
  • Review quality and methodology
Technical stack
  • Solidity
  • Rust
  • Foundry
  • Echidna
  • Slither
  • Certora Prover
Research directions
  • Cross-component failure modes
  • Economic attack modelling
  • Measuring review coverage
Reporting line
Leads the research structure; all team leads report to this role.
Emblem for smart contract assessment: a grid of contract modules under the Quantix lens, one marked red as a finding.

Smart Contract Assessment

Principal Smart Contract Auditor

Leads smart contract engagements from scope to final report: allocates reviewers, owns the threat model for each engagement and signs off every finding the team reports.

Specialisation
  • DeFi protocol review
  • Upgradeable contract systems
  • Cross-contract and integration risk
Technical stack
  • Solidity
  • Vyper
  • Rust (Anchor)
  • Move
  • Foundry
  • Hardhat
  • Slither
  • Semgrep
Research directions
  • Read-only reentrancy in integrations
  • ERC-4626 accounting edge cases
  • Proxy storage safety
Reporting line
Reports to the Head of Security Research
Emblem for formal methods: a derivation tree whose branches converge on a proven property.

Formal Methods

Formal Verification Lead

Owns formal specification and verification work: decides which properties are worth proving, writes the specifications with the protocol’s engineers and reports exactly what was proved under which assumptions.

Specialisation
  • Formal specification
  • SMT-based verification
  • Invariant design
Technical stack
  • Certora Prover
  • Halmos
  • K framework
  • Move Prover
  • SMTChecker
  • Echidna
Research directions
  • Specification patterns for lending and vaults
  • Equivalence checking across upgrades
  • Proof maintenance in CI
Services owned
Formal Verification
Reporting line
Reports to the Head of Security Research
Emblem for infrastructure security: node racks beneath a gateway and a key vault.

Protocol & Infrastructure Security

Blockchain Security Engineer

Leads penetration testing and infrastructure review: the frontends, signing flows, APIs, nodes and cloud environments around on-chain code. Also builds Quantix analysis tooling.

Specialisation
  • Web3 application security
  • Key management and signing
  • Cloud and CI/CD hardening
Technical stack
  • TypeScript
  • Go
  • Rust
  • Burp Suite
  • Kubernetes
  • Terraform
  • Geth
  • Foundry
Research directions
  • Transaction-construction integrity
  • RPC trust in frontends
  • MPC and policy-engine bypasses
Reporting line
Reports to the Head of Security Research
Emblem for threat intelligence: a radar sweep over a network map with one flagged indicator.

Threat Intelligence & Forensics

Threat Intelligence Analyst

Tracks how attacks against decentralised systems are prepared and executed, and leads on-chain forensics: transaction reconstruction, fund tracing and attribution to risk categories.

Specialisation
  • On-chain forensics
  • Address classification
  • Attack technique tracking
Technical stack
  • Python
  • SQL
  • Graph analysis
  • Trace decoding
  • Decoded chain data in SQL
  • Jupyter
Research directions
  • Pre-attack on-chain indicators
  • Cross-chain laundering paths
  • Approval-phishing infrastructure
Reporting line
Reports to the Head of Security Research
Emblem for security operations: an event timeline with a detection pulse and an alert beacon.

Security Operations

Security Operations Lead

Owns monitoring design and incident response: turns threat models into detection rules, keeps alert noise low and runs the response playbook when an incident is reported.

Specialisation
  • Detection engineering
  • Incident response
  • Operational resilience
Technical stack
  • Event decoding
  • Alert routing
  • Go
  • TypeScript
  • Grafana
  • On-call escalation
Research directions
  • Low-noise detection for privileged operations
  • Upgrade-path monitoring
  • Response time-to-containment
Reporting line
Reports to the Head of Security Research

Working together

How work moves between roles.

Ownership is explicit at every step: one role is accountable, others contribute.
StepAccountableContributing
Scope and threat modelPrincipal Smart Contract AuditorHead of Security Research
Review and analysisPrincipal Smart Contract AuditorFormal Verification Lead, Blockchain Security Engineer
Peer review of critical and high findingsHead of Security ResearchPrincipal Smart Contract Auditor
Monitoring rules from the threat modelSecurity Operations LeadThreat Intelligence Analyst
Incident triage and forensicsSecurity Operations LeadThreat Intelligence Analyst, Blockchain Security Engineer
Publication of researchHead of Security ResearchThreat Intelligence Analyst

Service ownership

All 9 services have an accountable role.

Career areas

Disciplines, not vacancies.

Quantix hires into the disciplines below. This site does not list open positions or compensation.
  • Smart contract assessment
  • Formal methods
  • Application and infrastructure security
  • Threat intelligence and forensics
  • Security operations
  • Research engineering
Skills by career area

Work with the research structure.

Engagement requests are read by the role that will scope them. Researchers can contribute through programmes and challenges.

Discuss Your Security RequirementsResearcher Network