The English-language job board for Spain

Protocol Security Researcher

Remote, London, England +3·Full-time·Added 18 days ago

Aave Labs

3 open roles

Apply

Overview

Job details

Full-time hours
Per the ad.
Fully remote
Per the ad.

Requirements

Have the right to work in Spain
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Work in English
English is required, per the ad.
Have 5+ years of experience
Mid-level role.

Requirements

What we're looking for

5+ years of relevant security experience
Strong smart contract security background
Ability to independently review complex codebases and reason about protocol-level failure modes
Attacker mindset: you can move from "this looks wrong" to "this is how it could be exploited"
Strong understanding of DeFi mechanisms, including lending, liquidations, accounting, oracles, collateral, governance, and integrations
Evidence that you are actively using AI to improve security research, review quality, or review throughput
Clear written communication: you can explain risk, impact, uncertainty, and trade-offs to engineers and non-security stakeholders
Good judgment about severity, exploitability, and when a finding matters

Nice to have

Experience with formal methods, fuzzing, invariant testing, or custom security tooling
Experience building internal tools for security review, code understanding, or knowledge management
Experience working with external audit firms or leading audit engagements
Familiarity with governance payloads, upgrade systems, permissioning, and incident response
Open-source security research, published findings, CTFs, bug bounties, or prior public vulnerability research

Haven't quite met all the criteria? Let's not miss out on the chance to speak. Whilst you might not meet every single requirement, you might bring other, more exciting skills to the companies!

The role

Aave is looking for a Protocol Security Researcher to help build its internal protocol security function.

The role sits at the intersection of smart contract security, protocol design, adversarial research, and AI-assisted review. You will help assess major protocol changes before deployment, maintain security context across Aave's deployed systems, and reason about the risks introduced by critical dependencies, integrations, and Aave-adjacent infrastructure.

This is not a narrow audit role. The goal is to improve Aave's ability to understand and reduce protocol risk continuously.

What you'll do

Review major Aave protocol changes before external audit or deployment
Perform attacker-driven analysis of smart contracts, protocol mechanisms, and integrations
Participate in design and architecture discussions early enough to influence security-relevant decisions
Identify risks in Aave-adjacent systems, including assets, bridges, oracles, adapters, and critical dependencies
Contribute to AI-assisted security tooling and evaluate its effectiveness in real review workflows
Turn review findings into reusable knowledge, invariants, assumptions, and testing or monitoring ideas
Work with monitoring and incident response teams when review findings imply operational detection or response needs
Collaborate with external auditors by helping define scope, known risks, and areas of concern

About Aave Labs

Aave Labs is a technology company that builds blockchain-based financial software, hiring for roles such as Staff Smart Contract Engineer, Protocol Security Researcher, and Staff Backend Engineer for its 'Aave App Vaults' and 'Push' products. Its open positions span engineering, legal, risk, and business development, with a mix of full-time and service-provider (contractor) engagements.

Aave Labs does not list any office in Spain on its careers page; its physical hubs are London, Dublin, and New York, alongside remote locations across Europe, Asia, Switzerland, the UK, and the US. For international professionals, the most relevant entry points are its fully remote EU roles (e.g., Staff Backend Engineer, Aave App Vaults; Staff Smart Contract Engineer) and hybrid roles in London and Dublin.

Good to know if you are moving

Aave Labs offers fully remote EU positions, including Staff Backend Engineer, Aave App Vaults (Remote, EU) and Staff Smart Contract Engineer (Remote, EU / Remote, Switzerland).
Its physical office hubs are London, Dublin, and New York; no Spanish office locations are listed on its careers page.
Some roles are offered as 'Service Provider' engagements rather than full-time employment (e.g., Staff Smart Contract Engineer), so contract arrangements may be part of their hiring mix.
The company hires across engineering, legal, risk, and business development teams, with hybrid roles requiring presence in London, Dublin, or New York.

In their own words

About the company & team

Aave Labs began with a simple question: how do we make financial services like borrowing, saving, and earning more accessible globally?

We built the Aave Protocol, now the world's largest and most trusted onchain lending market, connecting decentralized finance with individuals, traditional finance, and fintech.

Today, we build trusted, high-quality products that expand access to lending, credit, and savings globally

We build trusted products that help people access and discover economic opportunities.

We hold a high bar for quality and craftsmanship. No detail is too small. Trust depends on it.

We're a global team building products people can actually use, turning complex technology into something simple and reliable.

We stay aligned, move quickly, and think long term, while keeping teams lean and focused on impact.

Additional information

Aave Labs celebrates diversity and views each and every team member as a separate individual with their own unique identity. No matter your race, religion, gender, ethnicity, age, disability, sexual orientation or even the wallet you use, we welcome you at Aave Labs. As an equal opportunities employer, we take accountability and believe in everyone's potential to build, create and inspire changes. With a mission to build a diverse workforce, we are proud to foster a working environment in which everyone can feel safe and valued for who they are.

All open roles at Aave Labs