Application Guide

How to Apply for Protocol Security Researcher

at Ethereum Foundation

🏢 About Ethereum Foundation

The Ethereum Foundation is a global non-profit dedicated to supporting Ethereum's security, decentralization, and resilience. Working here means contributing directly to the backbone of the Ethereum ecosystem, collaborating with leading researchers and developers.

About This Role

As a Protocol Security Researcher, you'll work to prevent vulnerabilities from reaching Ethereum mainnet by combining deep protocol knowledge with security research, manual review, fuzzing, AI-assisted analysis, and audits. Your work directly impacts the security and trustworthiness of the entire Ethereum network.

💡 A Day in the Life

A typical day might involve reviewing a new EIP for security implications, running fuzzers against a client implementation, or collaborating with protocol developers on a potential vulnerability. You might also spend time improving internal security tooling or analyzing AI-assisted bug discovery results, all while staying updated on the latest Ethereum research and network changes.

🚀 Application Tools

Generate Cover Letter

AI-powered, tailored for Ethereum Foundation

Interview Prep

Practice questions for this role

🎯 Who Ethereum Foundation Is Looking For

  • Deep understanding of Ethereum protocol internals, including execution layer, consensus layer, or networking.
  • Hands-on experience with Ethereum client implementations (e.g., Geth, Prysm, Lighthouse) and testing infrastructure.
  • Proven track record in security research, such as finding vulnerabilities, building fuzzers, or conducting security audits.
  • Familiarity with AI-assisted analysis and automated bug discovery tools.
  • Active contributor to Ethereum protocol development, such as EIPs, specs, or client codebases.

📝 Tips for Applying to Ethereum Foundation

1

Highlight specific Ethereum protocol contributions you've made, such as EIPs, PRs to client implementations, or participation in testing efforts.

2

Showcase any security vulnerabilities you've discovered or fuzzing tools you've built, with concrete examples and impact.

3

Demonstrate your familiarity with the Ethereum Foundation's work, such as recent hardfork reviews or their security research publications.

4

Tailor your resume to emphasize protocol-level security experience over general security or blockchain experience.

5

Include links to your GitHub, blog posts, or talks that showcase your deep Ethereum knowledge and security expertise.

✉️ What to Emphasize in Your Cover Letter

["Your passion for Ethereum's long-term security and decentralization.", 'Specific examples of your protocol security work, such as discovering vulnerabilities or improving fuzzing infrastructure.', 'Your ability to collaborate with protocol developers and researchers across the ecosystem.', "Why you're excited to contribute to the Ethereum Foundation's mission of supporting critical protocol work."]

Generate Cover Letter →

🔍 Research Before Applying

To stand out, make sure you've researched:

  • → Study recent Ethereum hardforks (e.g., Shanghai, Capella) and any security issues found during their development.
  • → Review the Ethereum Foundation's security research blog and publications to understand their focus areas.
  • → Familiarize yourself with the current Ethereum protocol roadmap and upcoming changes (e.g., EIP-4844, Verkle trees).
  • → Explore the EF's teams and initiatives, especially the Protocol Security team's past work and collaborations.

💬 Prepare for These Interview Topics

Based on this role, you may be asked about:

1 Deep dive into a specific Ethereum protocol component (e.g., execution layer, consensus layer) and its security considerations.
2 How you would approach reviewing a proposed hardfork for security vulnerabilities.
3 Your experience with fuzzing and how you would improve existing fuzzers for Ethereum clients.
4 How you would use AI-assisted analysis to discover bugs in protocol implementations.
5 Scenario: You find a critical vulnerability in a client implementation—how do you coordinate disclosure and mitigation?
Practice Interview Questions →

⚠️ Common Mistakes to Avoid

  • Applying without demonstrating deep Ethereum protocol knowledge—generic blockchain experience isn't enough.
  • Overemphasizing theoretical knowledge without practical examples of security research or tooling.
  • Ignoring the collaborative nature of the role—the EF values team players who can work across disciplines.

📅 Application Timeline

This position is open until filled. However, we recommend applying as soon as possible as roles at mission-driven organizations tend to fill quickly.

Typical hiring timeline:

1

Application Review

1-2 weeks

2

Initial Screening

Phone call or written assessment

3

Interviews

1-2 rounds, usually virtual

✓

Offer

Congratulations!

Ready to Apply?

Good luck with your application to Ethereum Foundation!

← Back to Job Listing Apply Now →