Protocol Security Researcher

Jobgether; France; À distance; EUR 120 000 - 190 000; Plein temps

Avantages offerts par ce poste

Remote-first

Global exposure

Impactful work

Cross-functional collaboration

AI tooling

Résumé du poste

Jobgether is seeking a Protocol Security Researcher based in France to help build and strengthen an internal protocol security function within a globally distributed engineering environment. You will review significant protocol and smart contract changes, conduct attacker-driven research, and influence security decisions early in architecture discussions.

You will collaborate with engineers, security specialists, monitoring teams, incident responders, and external auditors to reduce risks across

Qualifications

• 5+ years of security experience with a focus on smart contract and protocol security.
• Ability to review complex codebases and reason about protocol-level failures.
• Strong adversarial mindset and ability to explain exploit scenarios.
• Understanding of DeFi mechanisms (lending, oracles, governance, etc.).
• Experience using AI to enhance security research/reviews.
• Excellent written and verbal communication for technical and non-technical stakeholders.
• Sound judgment on severity, exploitability, impact, and relevance.
• Experience with formal methods, fuzzing, invariant testing, or security tooling is a plus.
• Experience developing internal tools for security reviews or knowledge management is valued.
• Experience collaborating with external audit firms or leading audit engagements is advantageous.
• Familiarity with governance payloads, upgrade mechanisms, permissioning systems, and incident response is beneficial.
• Open-source security research or bug bounty experience is a plus.
• Candidates who do not meet every requirement but bring relevant security expertise are encouraged to apply.

Responsabilités

• Review significant protocol and smart contract changes before external audits or production deployment.
• Conduct attacker-driven security research across smart contracts, protocol mechanisms, integrations, and related infrastructure.
• Participate in architecture and design discussions early enough to influence security-critical decisions.
• Investigate risks across adjacent systems, including assets, bridges, oracles, adapters, and other critical dependencies.
• Analyze potential protocol-level failure modes and translate technical concerns into concrete exploitation scenarios, impact assessments, and mitigation strategies.
• Develop and contribute to AI-assisted security tooling, while evaluating its effectiveness in real-world security review workflows.
• Convert security findings into reusable knowledge, invariants, assumptions, tests, monitoring strategies, and other durable security practices.
• Collaborate with monitoring and incident response teams when identified risks require operational detection or response mechanisms.
• Work alongside external auditors to help define audit scope, communicate known risks, and highlight areas requiring particular attention.

Connaissances

Smart contract security

Protocol security

Adversarial mindset

AI-assisted security

Security research

Communication skills

Outils

Formal methods

Fuzzing

Invariant testing

Security tooling

Audit collaboration

Description du poste

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Protocol Security Researcher based in France.

This is an opportunity to help build and strengthen an internal protocol security function within a globally distributed engineering environment. You will work at the intersection of smart contract security, protocol design, adversarial research, and AI-assisted security review. Your work will help assess major protocol changes before deployment and identify risks across complex decentralized financial systems. The role goes beyond traditional auditing, with a focus on continuously improving how protocol risks are understood, tested, monitored, and reduced. You will collaborate closely with engineers, security specialists, monitoring teams, incident responders, and external auditors. You will also contribute to reusable security knowledge, tooling, invariants, and testing strategies that can improve review quality and efficiency. The position offers significant scope to influence security decisions early and help shape the evolution of a high-impact protocol security function.

Accountabilities

• Review significant protocol and smart contract changes before external audits or production deployment.

• Conduct attacker-driven security research across smart contracts, protocol mechanisms, integrations, and related infrastructure.

• Participate in architecture and design discussions early enough to influence security-critical decisions.

• Investigate risks across adjacent systems, including assets, bridges, oracles, adapters, and other critical dependencies.

• Analyze potential protocol-level failure modes and translate technical concerns into concrete exploitation scenarios, impact assessments, and mitigation strategies.

• Develop and contribute to AI-assisted security tooling, while evaluating its effectiveness in real-world security review workflows.

• Convert security findings into reusable knowledge, invariants, assumptions, tests, monitoring strategies, and other durable security practices.

• Collaborate with monitoring and incident response teams when identified risks require operational detection or response mechanisms.

• Work alongside external auditors to help define audit scope, communicate known risks, and highlight areas requiring particular attention.

Requirements

• 5+ years of relevant security experience, with a strong background in smart contract and protocol security.

• Demonstrated ability to independently review complex codebases and reason deeply about protocol-level failure modes.

• Strong adversarial mindset, with the ability to move from identifying suspicious behavior to explaining how a vulnerability could realistically be exploited.

• Strong understanding of decentralized finance mechanisms, including lending, liquidations, accounting, oracles, collateral, governance, and protocol integrations.

• Demonstrated use of AI to improve security research, review quality, analysis depth, or review throughput.

• Strong written and verbal communication skills, with the ability to explain risks, impact, uncertainty, and trade-offs to both technical and non-technical stakeholders.

• Sound judgment when assessing severity, exploitability, practical impact, and the relevance of individual findings.

• Experience with formal methods, fuzzing, invariant testing, or custom security tooling is a plus.

• Experience developing internal tools for security reviews, code understanding, security research, or knowledge management is valued.

• Experience collaborating with external audit firms or leading security audit engagements is advantageous.

• Familiarity with governance payloads, upgrade mechanisms, permissioning systems, and incident response is beneficial.

• Open-source security research, published vulnerability findings, CTF participation, bug bounty experience, or prior public security research is a plus.

• Candidates who do not meet every listed requirement but bring relevant and demonstrable security expertise are encouraged to apply.

Benefits

• Remote-first working environment with flexibility across Europe, Asia, and the United States.

• Opportunity to work on complex smart contract, DeFi, and protocol security challenges with meaningful real-world impact.

• Broad scope to influence security architecture, research practices, tooling, and internal security processes.

• Collaboration with experienced engineers, security researchers, monitoring specialists, incident responders, and external auditors.

• Opportunity to work at the intersection of protocol security and emerging AI-assisted security research.

• Exposure to advanced decentralized finance infrastructure, including lending markets, governance, oracles, bridges, and integrations.

• Global, distributed team environment with an emphasis on high-quality engineering, autonomy, and long-term impact.

• Inclusive workplace committed to creating an environment where people can contribute, feel valued, and develop their expertise.