Ethereum Foundation Hires AI-Driven Protocol Security Researcher

The Ethereum Foundation is recruiting a protocol security researcher who will combine AI, fuzz testing and hands-on audits to hunt for vulnerabilities across Ethereum’s core infrastructure. Role and responsibilities - The new hire will join the Foundation’s Protocol Security team and probe weaknesses in the execution layer (transaction and smart-contract processing), the consensus layer (validator coordination), the peer-to-peer network, protocol specifications and the client implementations that enforce those rules. - Key duties include building and maintaining fuzzing tools, reviewing code and change sets slated for hard forks, performing manual protocol audits, coordinating responsible disclosure of confirmed issues, and integrating AI systems to speed automated vulnerability discovery. Why AI + humans The posting underlines a pragmatic hybrid approach: AI agents can generate large volumes of leads, but human researchers are still needed to reproduce issues, assess impact, and filter false positives. That mirrors findings from the Foundation’s own experiments with coordinated AI agents against protocol code and crypto libraries. In a July 9 technical post the Protocol Security team said the agents found real bugs but that “how little of the work went into finding them, and how much went into telling the real bugs from the ones that just looked real” was the bigger surprise. A concrete example: the agents helped surface a remotely-triggered panic in libp2p’s gossipsub component (part of the P2P layer used by consensus clients). Developers fixed the flaw before it was disclosed as CVE-2026-34219. Even so, most of the team’s effort went into producing reproducible evidence, proof-of-concept code, and human review before treating findings as confirmed vulnerabilities. Who they’re looking for The Foundation prefers engineers with deep knowledge of the Ethereum protocol — ideally people who have contributed to protocol development or who understand both execution- and consensus-layer specifications. Candidates should be proficient in languages used across client implementations, including Go, Rust, Java, C#, Nim and Python. The remote position is open to candidates in Europe and other regions. Organizational context The hiring comes less than a month after the Foundation dissolved its Protocol Support team during a broader restructuring that cut 54 positions (about 20% of staff). Protocol Support had coordinated core developer meetings, tracked upgrades, guided contributors through Ethereum Improvement Proposals and run training for new protocol developers. Several former Foundation researchers have moved into independent organizations: Mo Jalil, Oskar Thorén and Aaryamann Challani launched EthSystems — a company building confidential Ethereum infrastructure for regulated institutions with backing from Bitmine, SharpLink and Consensys CEO Joe Lubin — while former researcher Francesco D’Amato joined independent research group Ethlabs on July 16. The Foundation has also reinforced security focus at the board level by appointing security researcher Pascal Caversaccio on July 29 to a one-year voluntary term, expanding the board to four members. Why it matters Protocol security has systemic implications. Ethereum underpins spot ETFs, stablecoins, tokenized assets and other financial applications used by U.S. institutions; a flaw in consensus rules or client implementations could ripple far beyond the Foundation. The new role does not signal that a fresh, undisclosed vulnerability has been found. Rather, it formalizes a workflow that pairs automated discovery with manual verification and disclosure management, expanding the team tasked with vetting hard-fork changes and catching weaknesses before they reach mainnet.