# Security Researcher ZK The Ethereum Foundation (EF) is a global non-profit organization dedicated to supporting Ethereum. Our mission is to ensure the long-term success of Ethereum by allocating resources to critical projects, being a positive voice within the Ethereum ecosystem, and advocating for Ethereum to the outside world. The EF is seeking a highly motivated and collaborative security researcher who with their skillset can help secure the Ethereum protocol, which enables users and projects to utilize Ethereum. As an open-source project, we operate transparently when possible and often communicate in publicly accessible channels, so being comfortable working in the open is essential. In this fast-paced, constantly evolving, and sometimes unpredictable space, your work will be dynamic and may shift in response to changing priorities. To thrive in this role, you will need to be very self-motivated and be comfortable working asynchronously and you will be working closely with many of the brightests minds in the ecosystem such as client teams, researchers, ethpandaops, testing teams and more to minimize the risk of security incidents on a protocol level. To be successfull in this role, you will likely have at least some experience in these areas: - Experience reviweing or formally verifying ZK circuits, have knowledge of common attack vectors in ZK, and preferably experience writing fuzzers for circuits or provers. - Experienced in at least one ZK DSL. - Writing, optimizing, and auditing ZK circuits, understanding constraint systems. - Familiar with, and perhaps experience building, zero-knowledge proof systems and understanding the tradeoffs. - Experience working on zkVMs and being familiar with things such as recursive proofs, proof aggregation and zk-friendly hash functions. - Having an understanding of elliptic curves (e.g., BN254, BLS12-381) and cryptographic primitives used in ZK and how they should be securely implemented is good, as you'd need to audit clients and reason around secure ways of implementing it. - Ability to read/write Rust (other languages we currently review in are Go, Java, C# and Nim). Our organization is very flat, and we believe that success comes from being able to work on what you find interesting and valuable rather than top-down directives. With that said, for this role we are looking for someone with an interest that aligns with the following: - Audit circuits and ZK components. - Build tooling to test/fuzz/prove circuit correctness and performance. - Analyze the security of zkVM-based systems. - Audit existing Ethereum mainnet client in terms of cryptographic implementations. - Keep up-to-date with cutting-edge ZK research and convert ideas into practical implementations. A list of examples of what the Protocol Security Research team is currently working can be found [here](https://security.ethereum.org/responsibilities). * Full-time position * Fully remote * Flexible work hours * Competitive compensation Apply here: https://jobs.lever.co/ethereumfoundation/149ae022-8a81-4e42-a778-6d934191fa36