Protocol Security Researcher

8 hours, 36 minutes ago
Full-time
Senior
Cybersecurity
Aave

Aave

Aave is a leading decentralized finance company that created the Aave Protocol, a widely used liquidity protocol governed by the Aave Community. They also developed Lens Protocol, a blockchain-based social media tech stack.

Capital Markets
51-200
Founded 2017

Description

  • Review major Aave protocol changes before external audits and deployment.
  • Perform attacker-driven security analysis of smart contracts, protocol mechanisms, and integrations.
  • Participate in protocol design and architecture discussions to influence security decisions early.
  • Assess risks in adjacent systems, including assets, bridges, oracles, adapters, and critical dependencies.
  • Contribute to AI-assisted security tooling and evaluate its effectiveness in review workflows.
  • Convert findings into reusable security knowledge, invariants, assumptions, testing ideas, and monitoring improvements.
  • Partner with monitoring and incident response teams on operational detection and response needs.
  • Collaborate with external auditors to define scope, known risks, and priority review areas.

Requirements

  • 5+ years of relevant security experience.
  • Strong background in smart contract security.
  • Ability to independently review complex codebases and identify protocol-level failure modes.
  • Attacker mindset with the ability to translate suspected issues into plausible exploit scenarios.
  • Strong understanding of DeFi mechanisms, including lending, liquidations, accounting, oracles, collateral, governance, and integrations.
  • Active use of AI to improve security research, review quality, or review throughput.
  • Clear written communication of risk, impact, uncertainty, and trade-offs to technical and non-technical stakeholders.
  • Sound judgment on severity, exploitability, and materiality of findings.
  • Experience with formal methods, fuzzing, invariant testing, or custom security tooling (preferred).
  • Experience with audit firms, audit engagements, governance and upgrade systems, permissioning, incident response, or public security research (preferred).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Manager, Threat Intelligence

PDI Technologies, 1001-5000 Gas Utilities

Lead PDI Technologies’ SOC threat intelligence, threat hunting, and detection engineering program to protect more than 12,000 retail, fuel, hospitality, and payments customers from evolving cyber threats.

AWS Azure Cybersecurity Python SIEM Splunk
8 hours, 21 minutes ago

Security Platform Engineer I

Tusker 201-500 Consumer Services

Tusker is seeking a Security Operations & Technology engineer to maintain, support, and improve the customer-facing security platforms that underpin its managed security services.

Active Directory Azure Cybersecurity DHCP DNS PowerShell SIEM TCP/IP Windows Server
8 hours, 36 minutes ago

Junior Cybersecurity Engineer

Quadcode 201-500 Internet Software & Services

Join Quadcode’s Security Team as a Junior Cybersecurity Specialist to help protect the corporate infrastructure supporting its global fintech and SaaS trading-platform operations.

Agile Ansible AWS Bash Chef Confluence Cybersecurity GitLab GPT Kubernetes Linux macOS Network Security Python Splunk Terraform
8 hours, 36 minutes ago

Cybersecurity Engineering & Operations Director

Onit 501-1000 IT Services

Lead cybersecurity engineering and operations at Onit, securing its AI-driven legal operations SaaS platform, cloud environments, and corporate infrastructure while enabling secure business growth.

AWS Bash CI/CD Cloudflare CrowdStrike DevSecOps Kubernetes Linux LLM Penetration Testing Python Secrets Management SIEM Terraform WAF
1 day, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers