Protocol Security Researcher

Aave is looking for a Protocol Security Researcher to help build its internal protocol security function.

The role sits at the intersection of smart contract security, protocol design, adversarial research, and AI-assisted review.

You will help assess major protocol changes before deployment, maintain security context across Aave’s deployed systems, and reason about the risks introduced by critical dependencies, integrations, and Aave-adjacent infrastructure.

This is not a narrow audit role.

The goal is to improve Aave’s ability to understand and reduce protocol risk continuously.

Aave is looking for a Protocol Security Researcher to help build its internal protocol security function.

The role sits at the intersection of smart contract security, protocol design, adversarial research, and AI-assisted review.

You will help assess major protocol changes before deployment, maintain security context across Aave’s deployed systems, and reason about the risks introduced by critical dependencies, integrations, and Aave-adjacent infrastructure.

This is not a narrow audit role.

The goal is to improve Aave’s ability to understand and reduce protocol risk continuously.

• Review major Aave protocol changes before external audit or deployment
• Perform attacker-driven analysis of smart contracts, protocol mechanisms, and integrations
• Participate in design and architecture discussions early enough to influence security-relevant decisions
• Identify risks in Aave-adjacent systems, including assets, bridges, oracles, adapters, and critical dependencies
• Contribute to AI-assisted security tooling and evaluate its effectiveness in real review workflows
• Turn review findings into reusable knowledge, invariants, assumptions, and testing or monitoring ideas
• Work with monitoring and incident response teams when review findings imply operational detection or response needs
• Collaborate with external auditors by helping define scope, known risks, and areas of concern
• 5+ years of relevant security experience
• Strong smart contract security background
• Ability to independently review complex codebases and reason about protocol-level failure modes
• Attacker mindset: you can move from “this looks wrong” to “this is how it could be exploited”
• Strong understanding of DeFi mechanisms, including lending, liquidations, accounting, oracles, collateral, governance, and integrations