Protocol Security Researcher

Jobgether; Lavamünd; Remote; EUR 159.000 - 222.000; Vollzeit

Benefits dieser Stelle

Remote-first

Impactful security work

Broad security scope

Collaborative team

Zusammenfassung

Jobgether is seeking a Protocol Security Researcher to help build a security function across a globally distributed engineering environment. You will work at the intersection of smart contract security, protocol design, adversarial research, and AI-assisted security review.

You will review major protocol changes, identify risks in DeFi systems, and contribute to tooling, invariants, and testing strategies while collaborating with engineers, monitoring, and external auditors.

Qualifikationen

• 5+ years of security experience in smart contract and protocol security.
• Ability to independently review complex codebases and reason about protocol-level failure modes.
• Strong adversarial mindset to explain exploitability and practical impact.
• Understanding of DeFi mechanisms including lending, oracles, collateral, governance.
• Experience using AI to improve security review depth and throughput.
• Strong written and verbal communication, with ability to explain risks to technical and non-technical stakeholders.
• Judgment in assessing severity, exploitability, and impact of findings.
• Experience with formal methods, fuzzing, invariant testing, or security tooling is a plus.
• Experience building internal tooling for security reviews or knowledge management.
• Experience collaborating with external audit firms or leading security audits is advantageous.
• Familiarity with governance payloads and upgrade mechanisms is beneficial.
• Open-source security research or bug bounty experience is a plus.
• Candidates not meeting every requirement but with relevant expertise are encouraged to apply.

Aufgaben

• Review significant protocol and smart contract changes before audits or deployment.
• Conduct attacker-driven security research across smart contracts, protocol mechanisms, integrations, and related infrastructure.
• Participate in architecture and design discussions early to influence security decisions.
• Investigate risks across assets, bridges, oracles, adapters, and other dependencies.
• Analyze potential protocol-level failure modes and translate concerns into exploitation scenarios and mitigations.
• Develop and contribute to AI-assisted security tooling and evaluate its effectiveness.
• Convert security findings into reusable knowledge, invariants, tests, monitoring strategies, and other durable practices.
• Collaborate with monitoring and incident response teams when risks require operational detection or response.
• Work with external auditors to define audit scope and highlight areas needing attention.

Kenntnisse

Smart contract security

Protocol security

Adversarial mindset

Communication skills

Independent code review

AI-assisted security

Security tooling

Tools

AI tooling

Fuzzing tooling

Jobbeschreibung

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Protocol Security Researcher based in Switzerland.

This is an opportunity to help build and strengthen an internal protocol security function within a globally distributed engineering environment.
You will work at the intersection of smart contract security, protocol design, adversarial research, and AI-assisted security review.
Your work will help assess major protocol changes before deployment and identify risks across complex decentralized financial systems.
The role goes beyond traditional auditing, with a focus on continuously improving how protocol risks are understood, tested, monitored, and reduced.
You will collaborate closely with engineers, security specialists, monitoring teams, incident responders, and external auditors.
You will also contribute to reusable security knowledge, tooling, invariants, and testing strategies that can improve review quality and efficiency.
The position offers significant scope to influence security decisions early and help shape the evolution of a high-impact protocol security function.

Accountabilities

• Review significant protocol and smart contract changes before external audits or production deployment.




• Conduct attacker-driven security research across smart contracts, protocol mechanisms, integrations, and related infrastructure.




• Participate in architecture and design discussions early enough to influence security-critical decisions.




• Investigate risks across adjacent systems, including assets, bridges, oracles, adapters, and other critical dependencies.




• Analyze potential protocol-level failure modes and translate technical concerns into concrete exploitation scenarios, impact assessments, and mitigation strategies.




• Develop and contribute to AI-assisted security tooling, while evaluating its effectiveness in real-world security review workflows.




• Convert security findings into reusable knowledge, invariants, assumptions, tests, monitoring strategies, and other durable security practices.




• Collaborate with monitoring and incident response teams when identified risks require operational detection or response mechanisms.




• Work alongside external auditors to help define audit scope, communicate known risks, and highlight areas requiring particular attention.

Requirements

• 5+ years of relevant security experience, with a strong background in smart contract and protocol security.




• Demonstrated ability to independently review complex codebases and reason deeply about protocol-level failure modes.




• Strong adversarial mindset, with the ability to move from identifying suspicious behavior to explaining how a vulnerability could realistically be exploited.




• Strong understanding of decentralized finance mechanisms, including lending, liquidations, accounting, oracles, collateral, governance, and protocol integrations.




• Demonstrated use of AI to improve security research, review quality, analysis depth, or review throughput.




• Strong written and verbal communication skills, with the ability to explain risks, impact, uncertainty, and trade-offs to both technical and non-technical stakeholders.




• Sound judgment when assessing severity, exploitability, practical impact, and the relevance of individual findings.




• Experience with formal methods, fuzzing, invariant testing, or custom security tooling is a plus.




• Experience developing internal tools for security reviews, code understanding, security research, or knowledge management is valued.




• Experience collaborating with external audit firms or leading security audit engagements is advantageous.




• Familiarity with governance payloads, upgrade mechanisms, permissioning systems, and incident response is beneficial.




• Open-source security research, published vulnerability findings, CTF participation, bug bounty experience, or prior public security research is a plus.




• Candidates who do not meet every listed requirement but bring relevant and demonstrable security expertise are encouraged to apply.

Benefits

• Remote-first working environment with flexibility across Europe, Asia, and the United States.




• Opportunity to work on complex smart contract, DeFi, and protocol security challenges with meaningful real-world impact.




• Broad scope to influence security architecture, research practices, tooling, and internal security processes.




• Collaboration with experienced engineers, security researchers, monitoring specialists, incident responders, and external auditors.




• Opportunity to work at the intersection of protocol security and emerging AI-assisted security research.




• Exposure to advanced decentralized finance infrastructure, including lending markets, governance, oracles, bridges, and integrations.




• Global, distributed team environment with an emphasis on high-quality engineering, autonomy, and long-term impact.




• Inclusive workplace committed to creating an environment where people can contribute, feel valued, and develop their expertise.

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.