FVjobs — formal verification jobs

Research Software Engineer [UK-2026-RSE-1] at Topos Institute

Where: Oxford, UK · On-site
Level: Various
Proof stack: type theory, category theory, categorical logic, Rust, Haskell, TypeScript
Domain: scientific modelling, applied category theory, research software
Pay: GBP 65,000–85,000 depending on level
Work authorization: Topos will consider sponsoring UK visas
Notes: One posting for two hires on a new research software engineering team at the non-profit's Oxford office, hiring from entry level to experienced. Client-driven work plus CatColab, a Rust and TypeScript platform for modelling in domain-specific categorical logics. Apply by email with a CV and cover letter; applications are reviewed on a rolling basis.

Read the posting

Mathematician Talent Network at Mercor

Fri, 27 Feb 2026 00:00:00 +0000

Where: Remote · Remote (worldwide)
Level: Various
Proof stack: mathematical proof
Domain: AI training data, AI for mathematics
Pay: USD 60–80/hour, part-time (15–30 hours/week)
Work authorization: Mercor states it cannot support H-1B or STEM OPT candidates
Notes: An open application to Mercor's mathematician network rather than a specific opening: experts are matched to future contract projects training and evaluating AI models in mathematics, including proof and theory work. Independent contracting, paid weekly. Unlike Mercor's Lean listing, the posting names no proof assistant.

Read the posting

Open applications (formal verification, Lean) at &Truth

Tue, 27 Oct 2026 00:00:00 +0000

Where: Palo Alto, CA / Singapore · On-site
Level: Various
Proof stack: Lean, theorem proving, formal verification, programming languages
Domain: software verification, security, AI safety
Notes: A public benefit corporation building technology to prove code in any language safe, secure and correct, with independently checkable proofs. A general application rather than a specific opening: the careers page names formal verification, theorem proving, programming languages and Lean as the foundation, alongside product, forward-deployed and go-to-market roles.

Read the posting

Research Engineer in Machine Learning – Proof Generation for Cyber-physical Systems at Zeroth Research

Where: Birmingham, UK / remote UK / remote global · Remote (worldwide)
Level: Various
Proof stack: Lean, SMT, model checking, neural network verification, reinforcement learning, Python, automated reasoning, theorem proving
Domain: cyber-physical systems, AI safety, AI for verification
Pay: GBP 60,000–80,000 for UK residents, adjusted to local market rates elsewhere
Notes: One posting for two hires: neural certificate learning and LLM-based certificate generation. Fixed-term until November 2027, funded by ARIA's Safeguarded AI programme; mostly remote, with periodic meetups in Birmingham.

Read the posting

Research Engineer in Formal Methods – Protocol Synthesis for Multi-agent Systems at Zeroth Research

Where: Birmingham, UK / remote UK / remote global · Remote (worldwide)
Level: Research engineer
Proof stack: Lean, Rust, model checking, reactive synthesis, temporal logic, automated reasoning, formal methods, program verification, theorem proving
Domain: multi-agent systems, AI safety, cyber-physical systems, communication protocols
Pay: GBP 60,000–80,000 for UK residents, adjusted to local market rates elsewhere
Notes: Fixed-term until August 2027, renewable with the project; funded by ARIA's Scaling Trust programme. Mostly remote, with periodic meetups in Birmingham.

Read the posting

Research Engineer in Applied Cryptography – Zero-Knowledge Model Checking at Zeroth Research

Where: Birmingham, UK / remote UK / remote global · Remote (worldwide)
Level: Research engineer
Proof stack: Rust, arkworks, Halo2, Plonky3, model checking, runtime verification, zero-knowledge proofs, automated reasoning, formal methods
Domain: cryptography, zero-knowledge proofs, AI safety
Pay: GBP 60,000–80,000 for UK residents, adjusted to local market rates elsewhere
Notes: Fixed-term until November 2027, funded by ARIA's Safeguarded AI programme. Mostly remote, with periodic meetups in Birmingham.

Read the posting

Formal Methods Engineer at Atalanta

Where: Washington, DC · On-site
Level: Senior
Proof stack: Lean, Z3, automated reasoning, model checking, Rust, SMT, static analysis, theorem proving
Domain: defense, space, energy, AI for verification, hardware, software, cryptography, security, AI safety
Pay: USD 225,000–275,000 plus equity
Work authorization: U.S. citizenship required; must be eligible for a TS/SCI security clearance
Notes: Leads the reasoning engine behind Atalanta's Argo platform and serves as PI on US Government-funded research; PhD required.

Read the posting

Synthesis or Formal Verification Developer at YosysHQ at YosysHQ

Mon, 01 Sep 2025 00:00:00 +0000

Where: Anywhere · Remote (worldwide)
Level: Engineer
Proof stack: Yosys, SymbiYosys, SAT, SMT, C++, Rust, Python
Domain: EDA tools, open source
Pay: EUR 6,000/month full-time (flat rate for everyone); part-time possible
Work authorization: Freelance contract with an Austrian company; candidates must not live in a sanctioned/export-restricted country or be barred from US-government work
Notes: Maintainers of Yosys and the open-source EDA stack. The posting has a formal track (hardware model checking implementation) and a synthesis track.

Read the posting

Senior Formal Verification Engineer at Waymo

Mon, 09 Feb 2026 00:00:00 +0000

Where: Mountain View, CA · Hybrid
Level: Senior
Proof stack: JasperGold, VC Formal, Questa Formal, SystemVerilog Assertions, bounded model checking, sequential equivalence checking
Domain: hardware, automotive, autonomous vehicles
Pay: USD 204,000–259,000 base
Notes: Owns formal sign-off for Waymo's custom autonomous-driving silicon.

Read the posting

Formal Methods Researcher for ZK at Veridise

Wed, 21 Jan 2026 00:00:00 +0000

Where: Flexible · Remote
Level: Research scientist
Proof stack: Lean, Rocq, ACL2, SMT, Rust, C++
Domain: zero-knowledge, blockchain security
Notes: PhD or equivalent professional research experience requested.

Read the posting

Senior Formal Verification Engineer at Velaura

Sat, 25 Jul 2026 00:00:00 +0000

Where: Santa Clara, CA / Bangalore, India · On-site
Level: Senior
Proof stack: SystemVerilog Assertions, JasperGold, VC Formal, Questa Formal, OneSpin, bounded model checking, equivalence checking
Domain: hardware, robotics, physical AI
Pay: USD 200,000–300,000 base plus equity
Notes: Physical-AI SoC startup; formal for CPUs, FPUs (IEEE-754), vector/SIMD; 10+ years expected.

Read the posting

PhD student — Scalable Verification of Quantum Programs at Uppsala University

Fri, 21 Aug 2026 00:00:00 +0000

Where: Uppsala, Sweden · On-site
Level: PhD
Proof stack: program verification, automated theorem proving
Domain: quantum computing
Work authorization: The position may be subject to security vetting ("Anställningen kan komma att säkerhetsprövas").
Notes: Department of Information Technology. Ad in Swedish. Start 2027-01-15. Deadline 2026-11-15.

Read the posting

PhD scholarships 2027 (John Anderson Research Studentship Scheme) at University of Strathclyde (Mathematically Structured Programming group)

Mon, 26 Oct 2026 00:00:00 +0000

Where: Glasgow, UK · On-site
Level: PhD
Proof stack: dependent types, proof automation, model checking
Domain: type theory, programming languages
Work authorization: Funding covers UK Home fees only ("not enough for non-UK tuition fees").
Notes: Competitive scheme with several fully funded places. Contact a potential supervisor before 2026-12-01; candidacy decision 2026-12-11.

Read the posting

PhD in End-to-End Verification of Security Protocols in Isabelle at University of Exeter

Tue, 27 Oct 2026 00:00:00 +0000

Where: Exeter, UK · On-site
Level: PhD
Proof stack: Isabelle/HOL, zero-knowledge proofs
Domain: cryptography, compilers, security protocols
Pay: UK tuition fees plus GBP 21,805/year stipend (3.5 years)
Work authorization: EPSRC Doctoral Landscape Award residence criteria apply. The jobs.ac.uk advert lists funding for UK, EU and international students.
Notes: One of several projects competing in the EPSRC DLA studentship round for September 2027 entry. Deadline 2026-12-08 (midday).

Read the posting

Research Associate — RubberDUQ project (semantics and correct-by-construction compilation for hybrid quantum-classical programs) at University of Edinburgh (Quantum Software Lab)

Wed, 21 Oct 2026 00:00:00 +0000

Where: Edinburgh, UK · Hybrid
Level: Postdoc
Proof stack: categorical semantics, compiler correctness
Domain: quantum computing, compilers
Pay: GBP 41,064–48,822
Notes: 12-month fixed-term, to 31/12/2027. Job ref 15102. Deadline 2026-11-04.

Read the posting

PhD Studentship: Formalising the Local Langlands Correspondence for GL₂(F) in Lean at University of East Anglia

Where: Norwich, UK · On-site
Level: PhD
Proof stack: Lean
Domain: formalized mathematics, number theory
Notes: Self-funded: no stipend, and a bench fee is payable. Supervisor Christopher Birkbeck. Start 2027-02-01. Deadline 2026-11-30.

Read the posting

PhD Position: Systematic Derivation of Formal Languages and Their Correctness at TU Delft

Where: Delft, Netherlands · On-site
Level: PhD
Proof stack: Agda, Rocq, Lean
Domain: type theory, programming languages
Pay: EUR 3,204–4,051 gross/month (years 1–4)
Notes: AFOSR-funded SemSyn project (Benedikt Ahrens): dependent type theory, two-level type theory, with formalization in Agda. 4 years (1.5 + 2.5). Rolling review. Deadline 2026-11-29.

Read the posting

PhD Positions in Formal Methods for Trustworthy Systems and AI at TU Braunschweig

Where: Braunschweig, Germany · On-site
Level: PhD
Proof stack: model checking, automated reasoning, Rust
Domain: AI, explainability
Pay: TV-L E13
Notes: New group led by Clemens Dubslaff, several full-time PhD positions. Apply by email. Deadline 2026-12-07 (per ILLC listing).

Read the posting

AI Engineer at TrustInSoft

Where: Paris, France · On-site
Level: Engineer
Proof stack: formal methods, C, OCaml
Domain: static analysis, AI for verification
Notes: Joins the 15-person R&D team behind TrustInSoft Analyzer (a Frama-C derivative); OCaml can be learned on the job. The posting promises a "flexible working environment" but states no remote policy.

Read the posting

Senior Security Engineer, Research & Engineering (United Kingdom) at Trail of Bits

Wed, 02 Sep 2026 00:00:00 +0000

Where: United Kingdom · Remote
Level: Senior
Proof stack: Lean, Rocq, F*, Dafny, Verus
Domain: security assurance, verified systems
Work authorization: Remote within the United Kingdom
Notes: Attacks formally verified systems by mapping what a proof does and does not establish, then demonstrating gaps with working exploits.

Read the posting

Systems Engineer / ML Researcher / research fellowship at Theorem (Theorem Labs)

Where: San Francisco, CA · On-site
Level: Various
Proof stack: Lean, Rocq
Domain: AI for program verification
Pay: USD 200,000–500,000 plus equity; fellowship USD 125,000/yr pro rata
Notes: Built lf-lean, an AI-assisted verified Rocq-to-Lean translation.

Read the posting

STAGE – Ingénieur Automatisation agentique d'analyse statique de code C – F/H at Thales

Wed, 21 Oct 2026 00:00:00 +0000

Where: Toulouse, France · On-site
Level: Intern
Proof stack: Frama-C, C
Domain: embedded security, static analysis
Notes: Six-month engineering internship building an MCP server that exposes Frama-C to an AI agent.

Read the posting

Stage en IA : automatisation de la conformité d'un référentiel documentaire et génération d'un code sécurisé at Thales

Mon, 26 Oct 2026 00:00:00 +0000

Where: Gennevilliers, France · On-site
Level: Intern
Proof stack: Coq, OCaml
Domain: security, verified software
Notes: Master's-level (Bac+4/5) internship. Despite the AI title, the task is a data filter developed and proved correct in Coq, then extracted to OCaml.

Read the posting

Formal Verification Engineer at Tenstorrent

Mon, 05 Oct 2026 00:00:00 +0000

Where: North America or Spain (listed Santa Clara, CA; Spain) · Remote
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, CPU, RISC-V, AI accelerators
Pay: USD 100k–500k company-wide engineer range (base + variable); role-specific band not given
Work authorization: US export control (EAR): offer may be contingent on citizenship/permanent residency or a licence
Notes: Posting says candidates at various experience levels are welcome; 6+ years listed.

Read the posting

Senior Staff Formal Verification Applications Engineer at Synopsys

Sun, 27 Sep 2026 00:00:00 +0000

Where: Sunnyvale, CA · On-site
Level: Senior
Proof stack: VC Formal, SVA
Domain: EDA tools, hardware
Pay: USD 157,000–235,000 base
Notes: Customer-facing VC Formal deployment role covering property checking, DPV, SEQ and connectivity.

Read the posting

Principal Application Engineer, VC Formal at Synopsys

Sun, 20 Sep 2026 00:00:00 +0000

Where: Bengaluru, India · On-site
Level: Principal
Proof stack: VC Formal, SVA
Domain: EDA tools, hardware

Read the posting

PhD Position in Strategy Logics (verification and synthesis for multi-agent systems) at Sorbonne Paris North University (LIPN)

Where: Villetaneuse (Paris area), France · On-site
Level: PhD
Proof stack: model checking, ATL, synthesis
Domain: multi-agent systems
Notes: Supervisor Munyque Mittelmann. Apply by email. Deadline 2026-11-15.

Read the posting

Principal / Staff Applied Research Scientist at Snowflake

Wed, 02 Sep 2026 00:00:00 +0000

Where: Menlo Park, CA · On-site
Level: Principal
Proof stack: model checking, theorem proving, SAT/SMT, program verification, program analysis
Domain: databases, distributed systems, cloud
Pay: USD 236,000–339,200
Notes: New applied-research line on "verified data infrastructure": formal methods and automated reasoning applied to Snowflake's distributed systems and developer tooling. Hiring at Staff or Principal level; PhD (or equivalent) and 8+ years expected. Workplace arrangement not stated.

Read the posting

Staff Design Verification Engineer – CPU Core Formal Verification at SiFive

Sun, 13 Sep 2026 00:00:00 +0000

Where: Austin, TX / Santa Clara, CA · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, CPU, RISC-V
Work authorization: Offer contingent on authorization for access to export-controlled technology (or obtaining a licence)
Notes: Formal work on out-of-order RISC-V core units such as the frontend, issue/commit and the load-store unit. Three identical reqs are open (R-101462, R-101463, R-101466).

Read the posting

Senior CPU Formal Verification Engineer at SiFive

Mon, 26 Oct 2026 00:00:00 +0000

Where: Hyderabad / Bengaluru, India · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, CPU, RISC-V

Read the posting

Distinguished Formal Verification Architect at SiFive

Mon, 21 Sep 2026 00:00:00 +0000

Where: Santa Clara, CA / Austin, TX / Boston, MA · On-site
Level: Principal
Proof stack: VC Formal, JasperGold, SAT, SMT, theorem proving
Domain: hardware, CPU, RISC-V
Pay: USD 279,504–341,616 base
Work authorization: Offer contingent on authorization for access to export-controlled technology (or obtaining a licence)
Notes: Functional programming (Scala/OCaml/Haskell) and theorem-prover familiarity are nice-to-haves.

Read the posting

Member of Mathematical Staff at SF Tensor

Sun, 27 Sep 2026 00:00:00 +0000

Where: San Francisco, CA · On-site
Level: Research scientist
Proof stack: Lean, Rocq, SMT, Mathlib, Flocq
Domain: compilers, GPU kernels, AI for mathematics
Pay: USD 225,000–315,000 base plus equity
Notes: YC-backed GPU compiler that proves kernel correctness after search; role owns the proof engine, formal models of new hardware and floating-point / low-precision formalisation. PhD in maths strongly recommended but not required.

Read the posting

Intern, R&D Graduate Year Round - Formal Verification at Sandia National Laboratories

Where: Livermore, CA · On-site
Level: Intern
Proof stack: Rocq, CompCert, VST, Flocq, separation logic, Isabelle/HOL
Domain: compilers, firmware, hardware, numerical software
Work authorization: US citizens, permanent residents, asylees or refugees; nationals of China, Iran, North Korea or Russia barred unless also US citizens; no clearance required
Notes: Req 699392. Enrolled full-time graduate students; up to 30 hours/week during term.

Read the posting

Staff GPU Design Verification Engineer – Formal Verification at Samsung Semiconductor (SARC/ACL)

Mon, 12 Oct 2026 00:00:00 +0000

Where: Austin, TX · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, GPU
Pay: USD 151,000–226,600 base
Work authorization: May require access to US export-controlled information; must be authorized or eligible for government authorization
Notes: Xclipse mobile GPU; clock/power-gating formal.

Read the posting

Senior Staff Engineer, GPU Design Verification (Formal Verification) at Samsung Semiconductor (SARC/ACL)

Thu, 08 Oct 2026 00:00:00 +0000

Where: San Jose, CA · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, GPU
Pay: USD 198,200–297,200 base
Work authorization: May require access to US export-controlled information; must be authorized or eligible for government authorization

Read the posting

PhD positions — Certified quantum compilation; Verification of quantum cryptography; Type systems for quantum programming languages (postdocs also welcome) at RWTH Aachen University (Chair for Quantum Information Systems)

Where: Aachen, Germany · On-site
Level: PhD
Proof stack: machine-checked proofs, type systems
Domain: quantum computing, cryptography, compilers
Pay: TV-L E13
Notes: Dominique Unruh's group. The soft deadline (end of September 2026) has passed; the pages say later applications are considered only if the position is still unfilled.

Read the posting

Open applications — verification engineering (K framework) at Runtime Verification

Where: Urbana, IL — remote friendly · Remote
Level: Various
Proof stack: K framework, executable semantics
Domain: blockchain, language semantics

Read the posting

Research Software Engineer, Formal Methods (Hybrid) — Non-Kinetic Capabilities and Technologies at RTX BBN Technologies

Tue, 29 Sep 2026 00:00:00 +0000

Where: Cambridge, MA / Arlington, VA / Columbia, MD · On-site
Level: Research engineer
Proof stack: model checking, theorem proving, SAT, SMT
Domain: defense, network security, protocols
Pay: USD 86,800–165,200
Work authorization: US citizenship required; active Top Secret clearance required
Notes: The title says Hybrid but the posting body lists the role type as onsite.

Read the posting

Research Software Engineer, Formal Methods (Hybrid) — Networking and Cyber Technologies at RTX BBN Technologies

Wed, 01 Apr 2026 00:00:00 +0000

Where: Cambridge, MA / Arlington, VA / Columbia, MD · Hybrid
Level: Research engineer
Proof stack: model checking, theorem proving, SAT, SMT
Domain: defense, network security, protocols
Pay: USD 86,800–165,200
Work authorization: US citizenship required (must be able to obtain a security clearance)
Notes: Same title as req 01878215 but a different BBN group, and no existing clearance required.

Read the posting

Lean Engineer at Resolution

Tue, 06 Oct 2026 00:00:00 +0000

Where: Berkeley, CA · Hybrid
Level: Engineer
Proof stack: Lean, mathlib, autoformalization
Domain: AI safety, alignment theory, formal mathematics
Pay: Research Engineer levels L4–L7: USD 346,000–930,000 in person, USD 208,000–558,000 remote
Work authorization: Visa sponsorship offered for relocation to Berkeley
Notes: ASI-alignment lab founded in 2026 by former UK AISI alignment staff and Timaeus. The first dedicated Lean hire: sets conventions, shared libraries and review harnesses so agent-written autoformalizations can be trusted at scale. The posting says the job is mostly not writing Lean by hand. Based in Berkeley; remote only in exceptional cases.

Read the posting

Advanced Quantum Compiler Engineer (925) at Quantinuum

Mon, 03 Aug 2026 00:00:00 +0000

Where: Broomfield, CO · Hybrid
Level: Engineer
Proof stack: LLVM, MLIR, QIR, Rust, C++
Domain: quantum, compilers
Pay: USD 138,000–173,000
Work authorization: US Person required (citizen, green card, refugee or asylee)

Read the posting

Senior Staff Formal Verification Engineer at Qualcomm

Thu, 17 Sep 2026 00:00:00 +0000

Where: San Diego, CA / Austin, TX / Santa Clara, CA · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, GPU
Pay: USD 203,700–305,500
Notes: Adreno GPU.

Read the posting

Formal Verification Senior Engineer - Qualcomm, Cambridge, UK at Qualcomm

Fri, 04 Sep 2026 00:00:00 +0000

Where: Cambridge, United Kingdom · On-site
Level: Engineer
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal
Domain: hardware, GPU
Notes: Requires 2+ years of FV experience. DPV and C2RTL/RTL2RTL sequential equivalence experience is a plus.

Read the posting

CPU Formal Verification Engineer at Qualcomm

Thu, 17 Sep 2026 00:00:00 +0000

Where: Santa Clara, CA · On-site
Level: Senior
Proof stack: JasperGold, VC Formal, ACL2, HOL
Domain: hardware, CPU
Pay: USD 147,900–221,900
Notes: End-to-end formalisation of the refinement from architecture to microarchitecture. Domain knowledge wanted in ISA, floating point, memory consistency and coherency.

Read the posting

Research Scientist, Reinforcement Learning at Pramaana Labs

Mon, 24 Aug 2026 00:00:00 +0000

Where: Palo Alto, CA · On-site
Level: Research scientist
Proof stack: Lean
Domain: AI for formal reasoning, law, tax, healthcare
Notes: Pramaana (founded 2025; $27M seed led by Khosla, June 2026) formalizes tax codes, legal rules and clinical guidelines into a Lean 4 "symbolic world model". This role scales RLVR with the Lean kernel as reward and pushes autoformalization and proof search.

Read the posting

Research Scientist, AI at Pramaana Labs

Mon, 26 Oct 2026 00:00:00 +0000

Where: Palo Alto, CA (also Bengaluru, India) · On-site
Level: Research scientist
Proof stack: Lean
Domain: AI for formal reasoning, law, tax
Notes: Improves the accuracy, coverage and generalization of the domain formalizer, autoformalizer and prover. Works with formal-methods experts on whether model outputs are faithful to the source.

Read the posting

Research Intern at Pramaana Labs

Wed, 23 Sep 2026 00:00:00 +0000

Where: Palo Alto, CA (also Bengaluru, India) · On-site
Level: Intern
Proof stack: Lean, Coq, Isabelle
Domain: AI for formal reasoning
Notes: Possible areas: model training, harness engineering, AI-for-formal research and benchmarks. Includes designing harnesses for autoformalization and prover systems.

Read the posting

Research Engineer at Pramaana Labs

Mon, 26 Oct 2026 00:00:00 +0000

Where: Palo Alto, CA (also Bengaluru, India) · On-site
Level: Research engineer
Proof stack: Lean, Coq, Isabelle, SMT
Domain: AI for formal reasoning, law, tax
Notes: Builds and improves the domain formalizer, autoformalizer and prover with the formal-methods engineers. The posting says prior formal verification experience is not required.

Read the posting

Formal Methods Research Engineer at Oath Technologies

Wed, 09 Sep 2026 00:00:00 +0000

Where: Berkeley, CA · On-site
Level: Research engineer
Proof stack: Lean, Coq, Isabelle, SMT
Domain: AI safety, AI oversight
Notes: Formal methods tooling for AI oversight, starting with verified agent containment. Wants direct proof-assistant or SMT experience, plus PL theory or a record of moving formal methods into deployed systems. Hiring runs through Convergent Research's board.

Read the posting

Senior Research Scientist, AI-Enabled Secure Systems at NVIDIA

Thu, 22 Oct 2026 00:00:00 +0000

Where: Westford, MA / Santa Clara, CA · On-site
Level: Research scientist
Proof stack: theorem provers, formal verification, program analysis, synthesis
Domain: security, AI for code, hardware
Pay: USD 224,000–356,500 (Level 5); USD 272,000–431,250 (Level 6)
Notes: Combine generative AI and agents with formal methods, program analysis and synthesis to design and verify secure hardware and software, including building and checking proofs.

Read the posting

Senior Formal Verification Engineer - LPU at NVIDIA

Mon, 06 Jul 2026 00:00:00 +0000

Where: US remote (CA, TX, CO, OR, WA, MA) · Remote
Level: Senior
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal
Domain: hardware, AI accelerators
Pay: USD 136,000–218,500 (L3) / 168,000–264,500 (L4) base + equity
Notes: LPU (the Groq-derived inference architecture). Two more LPU formal reqs are open, one remote US and one remote Canada.

Read the posting

Senior Formal Verification Engineer at NVIDIA

Wed, 23 Sep 2026 00:00:00 +0000

Where: Santa Clara, CA / Austin, TX · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, GPU
Pay: USD 136,000–218,500 (L3) / 168,000–264,500 (L4) base + equity

Read the posting

Senior Compute System Software Engineer at NVIDIA

Mon, 21 Sep 2026 00:00:00 +0000

Where: Bengaluru, India · On-site
Level: Senior
Proof stack: Lean 4, TLA+, Haskell
Domain: GPU drivers, safety-critical software
Notes: Bootstraps formal verification of the software architecture and design of Tegra user-mode compute drivers, and defines a company-wide formal verification process.

Read the posting

Formal Verification Engineer - New College Grad 2026 at NVIDIA

Tue, 06 Oct 2026 00:00:00 +0000

Where: Santa Clara, CA · On-site
Level: Engineer
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal
Domain: hardware, GPU, CPU
Pay: USD 100,000–166,750 (L1) / 116,000–189,750 (L2) base + equity

Read the posting

AI Compiler Formal Verification Intern at NVIDIA

Tue, 20 Oct 2026 00:00:00 +0000

Where: Zurich, Switzerland · On-site
Level: Intern
Proof stack: Lean, SMT
Domain: compilers, AI infrastructure
Notes: Research and implement formal methods to verify AI compiler passes, IRs and lowerings, using AI and semantic verification. A strong formal-methods background (preferably a PhD) is expected.

Read the posting

Formal Verification Engineer at Nuvacore

Fri, 18 Sep 2026 00:00:00 +0000

Where: Austin, TX (also Santa Clara, CA; Markham, ON; Bangalore) · Hybrid
Level: Senior
Proof stack: JasperGold, VC Formal, Questa Formal, SystemVerilog Assertions, model checking, equivalence checking
Domain: hardware, CPUs
Pay: USD 140,000–250,000
Notes: CPU startup; Senior (4+ yrs) to Principal (15+ yrs); cache coherence, memory consistency, speculation. Theorem proving listed as a plus.

Read the posting

Postdoctoral and PhD positions — Foundations for Testing and Verifying Concurrency in Go (Umang Mathur) at National University of Singapore

Tue, 15 Sep 2026 00:00:00 +0000

Where: Singapore · On-site
Level: Postdoc
Proof stack: mechanized semantics, model checking, predictive analysis
Domain: concurrency, compilers
Notes: Also recruiting PhD students. The FOCS Lab project includes mechanized Go concurrency semantics with compiler-correctness proofs. Enquire by email; no deadline.

Read the posting

Experienced Formal Verification Engineer at Mobileye

Where: Haifa, Israel · On-site
Level: Senior
Proof stack: JasperGold, SystemVerilog
Domain: hardware, automotive, autonomous driving
Notes: Automated Driving Hardware group; 5+ years of formal verification experience required.

Read the posting

Applied Scientist - Research Engineer (Formal Methods), EMEA at Mistral AI

Tue, 20 Oct 2026 00:00:00 +0000

Where: Paris, France / London, UK · On-site
Level: Research engineer
Proof stack: Lean, proof assistants, autoformalization
Domain: AI for mathematics, software verification
Notes: Train and post-train LLMs for formal reasoning. Build theorem-proving and software-verification datasets, evaluators and benchmarks. RL from Lean verifiable rewards is a plus. The posting does not state a workplace type.

Read the posting

Senior Software Engineer (AI-driven code transformation with formal verification) at Microsoft

Fri, 23 Oct 2026 00:00:00 +0000

Where: Bangalore, India · On-site
Level: Senior
Proof stack: Verus, F*, Lean, TLA+, Dafny, CodeQL
Domain: developer tools, code migration
Notes: Req 200063310 (posting title is just "Senior Software Engineer"). Same team as req 200063311.

Read the posting

Senior Researcher - Software Verification - Microsoft Research at Microsoft

Wed, 14 Oct 2026 00:00:00 +0000

Where: Redmond, WA · On-site
Level: Research scientist
Proof stack: SMT, automated reasoning, program verification
Domain: systems software, AI for verification
Pay: USD 119,800–234,700 (US); USD 160,200–261,000 (SF Bay Area, NYC)
Notes: Req 200061829. Develops automated reasoning tools including SMT solvers (the Z3 / RiSE lineage, though the posting does not name Z3).

Read the posting

Principal Software Engineer (AI-driven code transformation with formal verification) at Microsoft

Fri, 23 Oct 2026 00:00:00 +0000

Where: Bangalore, India · On-site
Level: Principal
Proof stack: Verus, F*, Lean, TLA+, Dafny, CodeQL
Domain: developer tools, code migration
Notes: Req 200063311 (posting title is just "Principal Software Engineer"). Agentic code migration backed by Verus proofs and spec inference. A Senior Software Engineer twin is req 200063310 (job/1970393557045291).

Read the posting

Principal Researcher and Senior Principal Researcher - Software Verification - Microsoft Research at Microsoft

Wed, 14 Oct 2026 00:00:00 +0000

Where: Redmond, WA · On-site
Level: Principal
Proof stack: formal methods, systems software verification, AI agents
Domain: systems software, AI for verification
Pay: USD 142,800–274,800 (Principal) / 165,600–296,400 (Senior Principal); higher bands in SF Bay Area and NYC
Notes: Req 200061832. Research on AI and agents for "rapid development of vast amounts of verified systems code".

Read the posting

Principal Formal Design Verification Engineer at Microsoft

Thu, 15 Oct 2026 00:00:00 +0000

Where: Bangalore, India · On-site
Level: Principal
Proof stack: SystemVerilog, SVA
Domain: hardware, cloud, interconnect
Work authorization: Export-controlled information: proof of citizenship/residency for eligibility assessment; Microsoft Cloud Background Check

Read the posting

Post Doc Researcher (FoSSE, Microsoft Research India) at Microsoft

Thu, 20 Aug 2026 00:00:00 +0000

Where: Bangalore, India · On-site
Level: Postdoc
Proof stack: formal methods, static analysis, programming languages
Domain: software engineering, code migration
Notes: Req 200049580. FoSSE team works on code migration, translation and static analysis "using AI and formal methods".

Read the posting

Lean Engineer, Formal Mathematics (Lean 4, Mathlib, Theorem Proving) at Mercor

Wed, 30 Sep 2026 00:00:00 +0000

Where: Remote · Remote (worldwide)
Level: Engineer
Proof stack: Lean, mathlib
Domain: AI for mathematics, AI training data
Pay: USD 90–110/hour, part-time (20–40 hours/week)
Work authorization: Mercor states it cannot support H-1B or STEM OPT candidates
Notes: Placement at an unnamed "leading AI lab". Write and review Lean 4 proofs, formalize informal mathematics, and check whether AI-generated proofs prove the right statement. The posting calls it both W-2 employment through Cincinnatus LLC (or an international entity) and independent contracting.

Read the posting

Formal Verification Engineer at MatX

Tue, 19 May 2026 00:00:00 +0000

Where: Mountain View, CA (HQ) or Remote · Remote
Level: Various
Proof stack: JasperGold, VC Formal, SymbiYosys, SVA, Lean, Rocq, Isabelle
Domain: hardware, AI accelerators, compilers
Pay: USD 160k–275k (early career), 175k–400k (mid), 250k–600k (senior), plus equity
Work authorization: US export control: must be able to work without an export licence
Notes: Combines RTL model checking with HDL embeddings in interactive theorem provers and machine-checked compiler-lowering proofs.

Read the posting

Open applications — part-time reviewers and autoformalization expert (Formal Frontier team) at Mathlib Initiative

Where: Not stated · Remote (worldwide)
Level: Various
Proof stack: Lean, mathlib
Domain: formal mathematics, AI for mathematics
Notes: A Renaissance Philanthropy program. Takes applications for part-time contract reviewers and a part-time autoformalization expert on the Formal Frontier team. Successful applicants usually already contribute to major formal-math libraries. The published contact is info@mathlib-initiative.org.

Read the posting

Open applications (verified mathematics) at Math, Inc.

Where: Not stated · Remote (worldwide)
Level: Various
Proof stack: Lean
Domain: AI for mathematics, autoformalization
Notes: Makers of Gauss, an autoformalization agent that works in Lean. The page is a general application form asking for "evidence of extraordinary ability"; internships go through math.inc/careers/intern. Location and remote policy are not stated. Third-party bios place the company in Palo Alto.

Read the posting

Senior Engineer, Logic Equivalence CAD at Marvell

Wed, 14 Oct 2026 00:00:00 +0000

Where: Bangalore, India · On-site
Level: Senior
Proof stack: logical equivalence checking
Domain: hardware, EDA tools
Notes: CAD role owning company-wide RTL-to-gate and gate-to-gate equivalence checking flows.

Read the posting

Manager Formal Verification (m/f/d) at LUBIS EDA

Wed, 23 Sep 2026 00:00:00 +0000

Where: Kaiserslautern, Germany · Hybrid
Level: Lead
Proof stack: SVA
Domain: hardware, EDA services
Notes: Leads a team of 10–15 formal verification engineers. This is a people and customer management role.

Read the posting

Formal Verification Engineer - Senior Level at LUBIS EDA

Wed, 20 May 2026 00:00:00 +0000

Where: Kaiserslautern, Germany · Hybrid
Level: Senior
Proof stack: SVA
Domain: hardware, EDA services

Read the posting

Formal Verification Engineer - Professional Level at LUBIS EDA

Mon, 23 Mar 2026 00:00:00 +0000

Where: Kaiserslautern, Germany · Hybrid
Level: Engineer
Proof stack: SVA, Jasper, VC Formal, Questa Formal, OneSpin
Domain: hardware, EDA services
Notes: Formal verification consultancy for clients' RTL.

Read the posting

2027 PhD Graduate - Formal Verification and Software Assurance Engineer at Johns Hopkins Applied Physics Laboratory

Tue, 01 Sep 2026 00:00:00 +0000

Where: Laurel, MD · On-site
Level: Engineer
Proof stack: model checking, interactive theorem proving, automated theorem proving, abstract interpretation, symbolic execution
Domain: defense, cybersecurity, cyber-physical systems
Pay: USD 105,000–245,000
Work authorization: U.S. citizenship required; must obtain Interim Top Secret clearance by start date
Notes: For PhD graduates (2027 start). Rolling applications.

Read the posting

Formal Methods Engineer at Jane Street

Where: London, UK (also New York) · On-site
Level: Engineer
Proof stack: proof assistants, static analysis, refinement types, property-based testing
Domain: finance, AI-assisted programming
Notes: New team; no OCaml or functional programming experience required.

Read the posting

Senior Formal Verification Engineer – AI SoC Development at Intel

Fri, 20 Feb 2026 00:00:00 +0000

Where: Folsom, CA / Santa Clara, CA / Hillsboro, OR / Austin, TX · Hybrid
Level: Senior
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal, Questa Formal
Domain: hardware, AI accelerators
Pay: USD 220,920–311,890
Work authorization: Position of Trust: extended background investigation required

Read the posting

Formal Verification Engineer at Intel

Tue, 06 Oct 2026 00:00:00 +0000

Where: Haifa / Jerusalem / Petah Tikva, Israel · On-site
Level: Engineer
Proof stack: Jasper, SVA, model checking, equivalence checking
Domain: hardware, networking
Notes: Intel Networking (Ethernet) team.

Read the posting

PhD Position: Trustable Machine Learning: Analysis and Verification of Soft Automata at Inria (Rennes)

Where: Rennes, France · On-site
Level: PhD
Proof stack: neural network verification, automata learning
Domain: trustworthy ML
Pay: EUR 2,300 gross/month
Notes: Part of the SAIF ("Safe AI through Formal methods") project. 3-year contract. Deadline 2026-11-07.

Read the posting

Advanced Research Position: AI for formal mathematics (quality, evaluation and translation of LLM-generated proofs) at Inria (Argo team, Paris)

Where: Paris, France · On-site
Level: Research scientist
Proof stack: Lean, Mathlib, Rocq, Mathematical Components
Domain: AI for mathematics, formalized mathematics
Notes: BELLE project (AI for Math Fund). Leads the LLM axis: quality metrics for AI-generated Lean code, the BELLE-Prefs dataset and GRPO fine-tuning, and supervises a postdoc. 12-month renewable contract, start 2026-12-01. Ad in French. Deadline 2026-11-14.

Read the posting

Formal Verification Engineer at IBM

Tue, 13 Oct 2026 00:00:00 +0000

Where: Bangalore, India · Hybrid
Level: Senior
Proof stack: SVA, Verilog, VHDL, Python
Domain: hardware, CPU
Notes: The posting body calls the role "Formal Verification Lead". The work covers IBM server-class processors, SoCs and ASICs, using IBM internal formal tools.

Read the posting

Research Engineer, Formal Methods at Harmonic

Mon, 24 Aug 2026 00:00:00 +0000

Where: Palo Alto, CA / London, UK · On-site
Level: Research engineer
Proof stack: Lean, Rocq, Isabelle, Agda, Python
Domain: AI for mathematics, theorem proving

Read the posting

Research Engineer at Harmonic

Thu, 10 Jul 2025 00:00:00 +0000

Where: Palo Alto, CA · On-site
Level: Research engineer
Proof stack: Lean, theorem proving, reinforcement learning
Domain: AI for mathematics, theorem proving
Notes: Reinforcement Learning & Formal Methods team: new RL algorithms and models for mathematical theorem proving behind Aristotle (Lean 4). Separate from the two Harmonic roles already on the board.

Read the posting

Formal Verification Engineer (Aristotle) at Harmonic

Thu, 13 Aug 2026 00:00:00 +0000

Where: Palo Alto, CA / London, UK · On-site
Level: Engineer
Proof stack: Lean
Domain: AI for mathematics, hardware, software verification
Notes: Customer-facing; scope properties, run proofs with Aristotle, diagnose failures.

Read the posting

Lean Theorem Proving Engineer, Verified Code Generation, DeepMind at Google DeepMind

Where: London, UK / Mountain View, CA · On-site
Level: Engineer
Proof stack: Lean
Domain: AI for code, program verification
Pay: USD 174,000–252,000 plus 15% bonus target and equity (US)
Notes: Successor to the archived Research Scientist, Verified Code Generation role. Requires a PhD or equivalent, 3 years with Lean and 3 years using AI agents. The work formalizes C/C++/Rust semantics and correctness specs in Lean with AI help, and builds infrastructure for proof search at scale.

Read the posting

Senior SoC Formal Verification Engineer, Google Cloud at Google

Where: Tel Aviv / Haifa, Israel · On-site
Level: Senior
Proof stack: SystemVerilog, SVA, PSL, JasperGold, VC Formal, Questa Formal, 360-DV
Domain: hardware, cloud
Notes: Google's Israel team for custom server chips.

Read the posting

ASIC Formal Verification Engineer, TPU Compute at Google

Where: Sunnyvale, CA · On-site
Level: Senior
Proof stack: SystemVerilog, SVA, Jasper, VC Formal, Questa Formal
Domain: hardware, AI accelerators
Pay: USD 163,000–237,000 base + 15% bonus target + equity
Notes: The work includes formally proving floating-point adders and multipliers. Requires 8 years of experience, although Google labels the level "Mid".

Read the posting

Member of Technical Staff, Safety & Formal Verification at General Diffusion

Where: San Francisco, CA · On-site
Level: Engineer
Proof stack: model checking, SMT, theorem proving, abstract interpretation, runtime verification
Domain: AI infrastructure, compilers, AI safety
Notes: Compute-world-model startup. Owns an independent assurance layer that gates AI-proposed compute actions: machine-checkable safety invariants, refinement/semantic-equivalence validation of generated kernels, runtime monitors. Apply by email (careers@generaldiffusion.com).

Read the posting

Research Engineer at Galois

Mon, 05 Jan 2026 00:00:00 +0000

Where: Portland, OR / Arlington, VA / Dayton, OH / Minneapolis, MN / Boston, MA · Hybrid
Level: Research engineer
Proof stack: theorem provers, model checkers, Haskell, formal semantics
Domain: high-assurance software, defense, cryptography
Work authorization: US citizenship required (security clearance eligibility)
Notes: Employee-owned; pay is set by a company-wide transparent process rather than published per posting.

Read the posting

Principal Scientist at Galois

Mon, 13 Apr 2026 00:00:00 +0000

Where: Portland, OR / Arlington, VA / Dayton, OH / Minneapolis, MN / Boston, MA · Hybrid
Level: Principal
Proof stack: formal verification, theorem proving, static analysis
Domain: high-assurance software, defense, cryptography, AI
Work authorization: Must be eligible for a US security clearance (active clearance strongly preferred) and must not require an export licence
Notes: Leads externally funded research programs; PhD or equivalent with a publication record in FV.

Read the posting

Formal Verification - DV at Etched

Wed, 10 Jun 2026 00:00:00 +0000

Where: San Jose, CA · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, AI accelerators
Notes: Covers the full ASIC (compute arrays, NoC, PCIe, Ethernet). Includes a housing subsidy for living near the office.

Read the posting

Software Engineer: Keystone Project (Machine-Verified LLM Inference) at EPFL

Where: Lausanne, Switzerland (regular visits to Imperial College London) · On-site
Level: Research engineer
Proof stack: Rocq, Lean, HOL, Isabelle, CUDA, Triton
Domain: ML inference, GPU kernels, AI-assisted proof engineering
Notes: Engineering role on the same ARIA-funded verified-inference project. Prior formal verification experience is welcome but not required. 1-year renewable, start 2026-12-01. No deadline stated.

Read the posting

Postdoc: Networked Systems Abstractions Lab (LASeR) at EPFL

Where: Lausanne, Switzerland · On-site
Level: Postdoc
Proof stack: NetKAT, symbolic automata, decision procedures, theorem proving
Domain: networking
Notes: Nate Foster's lab: languages and formal reasoning tools for networks (NetKAT, routing algebras, packet scheduling). 1-year renewable, start 2026-12-01. No deadline stated.

Read the posting

Postdoc: Keystone Project (Machine-Verified LLM Inference) at EPFL

Where: Lausanne, Switzerland (regular visits to Imperial College London) · On-site
Level: Postdoc
Proof stack: Rocq, Lean, Isabelle, HOL, PTX, Triton
Domain: ML inference, GPU kernels, AI-assisted proof engineering
Notes: ARIA-funded EPFL/Imperial project to build a formally verified LLM inference engine (contact: Nate Foster). 1-year renewable contract, start 2026-12-01 or later. The EPFL page states no deadline; one third-party aggregator listed 3 Nov 2026, so treat it as urgent.

Read the posting

Post-doc on formal verification and algorithm discovery for numerical analysis at EPFL

Where: Lausanne, Switzerland · On-site
Level: Postdoc
Proof stack: Lean
Domain: numerical analysis, AI for mathematics
Notes: Chair of Numerical Modelling and Simulation (Annalisa Buffa). Possible projects: formalizing finite-element stability and error estimates in Lean, or AI-assisted discovery of discretizations that are then verified formally. 1-year contract, renewable.

Read the posting

Compiler Engineer (f/m/d) at eleQtron

Tue, 22 Sep 2026 00:00:00 +0000

Where: Hamburg or Siegen, Germany · On-site
Level: Engineer
Proof stack: LLVM, MLIR, QIR, C++, Rust
Domain: quantum, compilers

Read the posting

Postdoc in formal methods and programming languages (Alexandra Silva's group) at Cornell University

Mon, 12 Oct 2026 00:00:00 +0000

Where: Ithaca, NY, USA · On-site
Level: Postdoc
Proof stack: algebraic program analysis, program repair
Domain: networking, security, agentic systems
Notes: Announced on TYPES-announce on 2026-10-12. No deadline and no official ad; candidates are asked to contact the PI directly.

Read the posting

Formal Verification Engineer - AI at Cognichip

Where: Redwood City, CA / Toronto, ON · On-site
Level: Engineer
Proof stack: model checking, Coq, Lean, Isabelle, ACL2, Z3, cvc5
Domain: hardware, AI for chip design
Pay: USD 175,000–210,000
Notes: AI-for-chip-design startup. Open to people from pure maths/physics; mentorship and structured ramp-up into formal methods offered. Listing also at cognichip.ai/careers.

Read the posting

Research Engineer — Formal Methods at Code Metal

Fri, 22 May 2026 00:00:00 +0000

Where: Boston, MA · Hybrid
Level: Research engineer
Proof stack: theorem proving, SMT, program synthesis, static analysis
Domain: compilers, embedded
Pay: USD 180,000–266,800 plus equity
Work authorization: US Top Secret clearance eligibility listed as required

Read the posting

Ingénieur validation formelle de données sécuritaires H/F at CLEARSY

Where: Aix-en-Provence, France · Hybrid
Level: Engineer
Proof stack: B method, formal data validation
Domain: railway, safety-critical systems
Notes: Long-running posting (published July 22, 2025) still listed; formal validation of safety constraints on railway project data.

Read the posting

Ingénieur Méthodes Formelles H/F at CLEARSY

Mon, 17 Aug 2026 00:00:00 +0000

Where: Aix-en-Provence, France (also Paris and Lyon) · Hybrid
Level: Engineer
Proof stack: B method, Atelier B
Domain: railway, safety-critical systems
Pay: EUR 33,000–55,000 per year
Notes: Same posting in three cities: Paris https://clearsy.nos-recrutements.fr/job/5912 and Lyon https://clearsy.nos-recrutements.fr/job/5914. French-language posting; Bac+5 engineering profile. Teleworking agreement available.

Read the posting

Ingénieur développeur full stack Atelier B H/F at CLEARSY

Where: Aix-en-Provence, France · Hybrid
Level: Engineer
Proof stack: Atelier B, B method, C++, Qt
Domain: formal methods tooling, railway
Notes: Develops and modernises Atelier B (C/C++ back end, Qt front end). Published May 11, 2026.

Read the posting

Solidity Compiler Frontend Engineer at CertiK

Mon, 20 Oct 2025 00:00:00 +0000

Where: US / Remote · Remote
Level: Engineer
Proof stack: SMT, theorem provers, Solidity, Java, EVM
Domain: blockchain, smart contracts, compilers
Pay: USD 140,000–220,000 (US)
Work authorization: US remote only ("US / Remote"); hires must complete US employment-eligibility verification; visa sponsorship not stated
Notes: Builds the Java-based Solidity compiler frontend (parsing, type checking, semantic analysis) and the layer that feeds CertiK's formal verification tools. Requires 3+ years of compiler work and experience with SMT solvers or theorem provers. Sits alongside CertiK's Formal Methods SWE role, which is already on the board.

Read the posting

Software Engineer (III to Principal), Formal Methods at CertiK

Sat, 30 Jul 2022 00:00:00 +0000

Where: New York / Seattle / SF Bay Area / Remote · Remote
Level: Engineer
Proof stack: SMT, model checking, OCaml, Haskell
Domain: blockchain, smart contracts
Pay: USD 115,000–230,000 (US)
Notes: Wants model checking (BMC, CEGAR, IC3/PDR); publications at POPL/CAV/TACAS preferred.

Read the posting

Open applications (Lean, verified code) at Cajal

Where: San Francisco, CA (from the YC profile; the careers page gives no location) · On-site
Level: Various
Proof stack: Lean, WebAssembly
Domain: verified code optimization, scientific computing
Notes: YC W26 company. Its product Tau optimizes hot routines and proves in Lean that each version behaves like the original. To apply, open a PR to Talos (their open-source Lean Wasm interpreter), then email careers@caj.al. They say they do not look at CVs.

Read the posting

Software Engineer II at Cadence Design Systems

Wed, 23 Sep 2026 00:00:00 +0000

Where: Austin, TX · On-site
Level: Engineer
Proof stack: Conformal LEC, C++
Domain: EDA tools
Notes: Conformal team building the Conformal Logical Equivalence Checking, ECO and Low Power tools. The generic title hides the formal content.

Read the posting

Software Engineer I: Jasper R&D at Cadence Design Systems

Mon, 24 Aug 2026 00:00:00 +0000

Where: Belo Horizonte, Brazil · On-site
Level: Engineer
Proof stack: Jasper, C++
Domain: EDA tools
Notes: Develops the Jasper formal tool itself, working on formal engines, HDL synthesis and graph modelling.

Read the posting

AI Safety Research Scientist / Research Engineer (formal verification) at Beneficial AI Foundation

Where: Anywhere · Remote (worldwide)
Level: Various
Proof stack: Lean, Verus, Rust
Domain: AI safety, cryptography
Pay: USD 30–75/hour depending on role
Notes: Max Tegmark's foundation. Verifies production cryptographic Rust in Lean (curve25519-dalek, Signal protocols) — see github.com/Beneficial-AI-Foundation.

Read the posting

2027 Internship Safety Engineer, Agentic Safety Case Assessment at Bedrock Robotics

Fri, 25 Sep 2026 00:00:00 +0000

Where: San Francisco, CA · On-site
Level: Intern
Proof stack: Lean, Mathlib, Aeneas, Verus, Kani
Domain: robotics, autonomous vehicles, safety cases
Notes: Autonomous-excavator company. Intern formalises a safety claim, writes and proves a checker in Lean, runs it on fleet data, and builds audit tooling for LLM-assisted proving. Students only.

Read the posting

Staff Formal Verification Engineer at Axiomise

Mon, 20 Apr 2026 00:00:00 +0000

Where: Hemel Hempstead, UK · On-site
Level: Principal
Proof stack: SystemVerilog Assertions, PSL, theorem proving, equivalence checking
Domain: hardware, verification services
Work authorization: Visa sponsorship "for exceptional candidates"

Read the posting

Senior Formal Verification Engineer at Axiomise

Mon, 20 Apr 2026 00:00:00 +0000

Where: Hemel Hempstead, United Kingdom · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, EDA services
Work authorization: Visa sponsorship offered for exceptional candidates, on conditional terms
Notes: Includes line-management responsibilities.

Read the posting

Graduate Formal Verification Engineer at Axiomise

Thu, 08 Jan 2026 00:00:00 +0000

Where: Hemel Hempstead, United Kingdom · On-site
Level: Engineer
Proof stack: SystemVerilog, SVA, PSL
Domain: hardware, EDA services
Work authorization: For recent UK-based graduates; Graduate-visa holders sponsored for a Skilled Worker visa after the programme
Notes: The graduate programme cohort starts in 2026.

Read the posting

Member of Technical Staff at Axiom Math

Fri, 03 Apr 2026 00:00:00 +0000

Where: Palo Alto, CA / London, UK / Portland, OR / US remote / UK remote · Remote
Level: Research scientist
Proof stack: Lean, Coq, Isabelle
Domain: AI for mathematics, theorem proving
Notes: AI for mathematical discovery (successors to PatternBoost). Wants large-scale RL and neuro-symbolic experience plus a strong foundation in formal proof systems. Axiom makes AxiomProver and is moving into verified code generation.

Read the posting

Senior/ Staff Formal Verification Engineer at Astera Labs

Wed, 18 Mar 2026 00:00:00 +0000

Where: Tel Aviv, Israel · On-site
Level: Senior
Proof stack: SystemVerilog, SVA
Domain: hardware, interconnect, AI infrastructure
Notes: Founding member of Astera's new Israel R&D centre; owns formal environments from scratch to sign-off.

Read the posting

Formal Verification and RTL Design Software Engineer at Astera Labs

Mon, 31 Aug 2026 00:00:00 +0000

Where: San Jose, CA · On-site
Level: Senior
Proof stack: JasperGold, VC Formal, SystemVerilog Assertions, Python, LLM agents
Domain: hardware, AI for chip design
Pay: USD 160,500–200,000
Notes: AppliedAI team building LLM agents for formal proof convergence, lint and static verification flows.

Read the posting

Distinguished Formal Verification at Astera Labs

Mon, 23 Feb 2026 00:00:00 +0000

Where: San Jose, CA · On-site
Level: Principal
Proof stack: SystemVerilog, SVA
Domain: hardware, interconnect, AI infrastructure
Pay: USD 230,000–285,000
Notes: Company-wide technical authority on formal for PCIe/CXL/Ethernet/UCIe/UALink products.

Read the posting

Staff Architecture Formal Engineer at Arm

Thu, 25 Jun 2026 00:00:00 +0000

Where: Cambridge, United Kingdom · Hybrid
Level: Senior
Proof stack: OCaml, ASL, memory model tools
Domain: hardware, ISA specification
Pay: GBP 97,300–131,700
Work authorization: UK skilled worker sponsorship available; Arm covers employer-side costs only; no relocation package
Notes: Architecture Formal Team, which works on the Arm concurrency model and a formal description of ASL (the language of the Arm ARM). Builds lightweight verification tools.

Read the posting

Formal Verification Engineer at Arm

Wed, 16 Sep 2026 00:00:00 +0000

Where: Cambridge, United Kingdom · Hybrid
Level: Senior
Proof stack: model checking, SystemVerilog
Domain: hardware, CPU
Pay: GBP 55,300–74,800
Notes: Solutions Group. The posting asks for assume-guarantee reasoning, invariants and abstraction skills.

Read the posting

Professor (all ranks) in Verification, Validation, and Certification of AI-Enabled Complex Dynamical and Cyber-Physical Systems at Arizona State University

Where: Tempe, AZ, USA · On-site
Level: Lead
Proof stack: formal verification of hybrid systems, runtime assurance
Domain: cyber-physical systems, autonomy, AI safety
Notes: Faculty position (tenure-track or tenured, any rank), start August 2027. Deadline 2026-11-30; later applications go to a reserve pool.

Read the posting

GPU Formal Verification Engineer at Apple

Mon, 26 Oct 2026 00:00:00 +0000

Where: Santa Clara, CA · On-site
Level: Engineer
Proof stack: SystemVerilog, SVA
Domain: hardware, GPU, security
Pay: USD 150,400–277,600 base
Notes: Apple Silicon formal team. The work covers formal micro-architecture specifications and security-attack modelling.

Read the posting

Formal Verification Engineer at Apple

Thu, 24 Sep 2026 00:00:00 +0000

Where: Munich, Germany · On-site
Level: Various
Proof stack: SVA, PSL
Domain: hardware, CPU
Notes: Posting says Apple is hiring all levels from junior to senior; description reads as a formal verification architect role.

Read the posting

Formal Verification Engineer at Apple

Mon, 13 Apr 2026 00:00:00 +0000

Where: Austin, TX / Beaverton, OR / Cupertino, CA · On-site
Level: Engineer
Proof stack: SystemVerilog, SVA
Domain: hardware, security
Pay: USD 115,773–194,700 base (Cupertino range)
Notes: Entry-level (0 years required). The role focuses on the Secure Enclave and security-requirement verification.

Read the posting

Senior/Staff Engineer - Bombadil at Antithesis

Wed, 18 Mar 2026 00:00:00 +0000

Where: London, UK · On-site
Level: Senior
Proof stack: LTL, property-based testing, Rust
Domain: testing, web applications
Work authorization: No visa sponsorship; must already be authorized to work in the UK
Notes: Maintains Bombadil, Antithesis's open-source specification language and verifier for web UIs.

Read the posting

Sr Applied Scientist, Amazon Cryptographic Libraries at Amazon Web Services

Mon, 31 Aug 2026 00:00:00 +0000

Where: Seattle, WA · On-site
Level: Senior
Proof stack: HOL Light, Verus, CBMC, Lean
Domain: cryptography, post-quantum cryptography
Pay: USD 167,100–226,100
Work authorization: US-based; sponsorship not stated
Notes: Senior version of the AWS-LC proof role; Rust, C and assembly verification with AI-assisted proof development. A twin requisition, 10524925, has identical text.

Read the posting

Principal Applied Scientist, Neuro-Symbolic AI Labs at Amazon Web Services

Mon, 27 Apr 2026 00:00:00 +0000

Where: Boston, MA · On-site
Level: Principal
Proof stack: proof assistants
Domain: AI for reasoning, AI for mathematics
Pay: USD 198,900–269,000
Work authorization: US-based; sponsorship not stated
Notes: Team includes an Amazon Scholar in mathematics and collaborates with MIT, Berkeley and CMU.

Read the posting

Applied Scientist, Automated Reasoning at Amazon Web Services

Fri, 14 Aug 2026 00:00:00 +0000

Where: Multiple US cities · On-site
Level: Research scientist
Proof stack: Lean, Rocq, Dafny, Isabelle, SMT
Domain: cloud, cryptography, AI safety
Pay: USD 167,100–260,000 depending on location
Work authorization: US-based; sponsorship not stated
Notes: Requires a PhD or equivalent research experience.

Read the posting

Applied Scientist, Amazon Cryptographic Libraries at Amazon Web Services

Mon, 31 Aug 2026 00:00:00 +0000

Where: Seattle, WA · On-site
Level: Research scientist
Proof stack: HOL Light, Isabelle/HOL, Lean, Rocq, Verus
Domain: cryptography, post-quantum cryptography
Pay: USD 142,800–193,200
Work authorization: US-based; sponsorship not stated
Notes: Machine-checked proofs of AWS-LC's C and assembly, including ML-KEM, ML-DSA and SLH-DSA. Early-career, with mentoring from senior scientists. A twin requisition, 10524924, has identical text.

Read the posting

2027 Applied Science Internship - Automated Reasoning - United States, PhD Student Science Recruiting at Amazon Web Services

Thu, 17 Sep 2026 00:00:00 +0000

Where: Seattle, WA · On-site
Level: Intern
Proof stack: SAT, SMT, theorem proving, model checking, Lean
Domain: cloud, AI safety
Pay: USD 135,660 annualized (Seattle)
Work authorization: US internship; must be enrolled in a PhD and able to relocate
Notes: Minimum 12 weeks at 40 hours/week.

Read the posting

Senior Formal Verification Engineer, Annapurna Labs at Amazon (Annapurna Labs)

Mon, 19 Oct 2026 00:00:00 +0000

Where: Haifa, Israel · On-site
Level: Lead
Proof stack: SystemVerilog, SVA
Domain: hardware, CPU, cloud
Notes: L6 technical lead owning FV strategy for a Graviton/Nitro subsystem; team includes AI/agentic formal flows.

Read the posting

ASIC Formal Verification Engineer I, Annapurna Labs at Amazon (Annapurna Labs)

Thu, 22 Oct 2026 00:00:00 +0000

Where: Austin, TX / Cupertino, CA · On-site
Level: Engineer
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal
Domain: hardware, AI accelerators
Pay: Listed base: USD 116,100 (Austin) / USD 133,600 (Cupertino) annually
Notes: New-grad role on the Machine Learning Acceleration (Trainium/Inferentia) team; coursework or internship in formal methods required.

Read the posting

Sr. Formal Verification Engineer, Amazon Leo at Amazon (Amazon Leo)

Wed, 26 Aug 2026 00:00:00 +0000

Where: Austin, TX / Sunnyvale, CA / Redmond, WA / San Diego, CA · On-site
Level: Senior
Proof stack: SystemVerilog, SVA, JasperGold, Questa Formal
Domain: hardware, satellite communications
Pay: USD 185,200–250,000 (Austin, San Diego, Redmond); USD 213,000–287,500 (Sunnyvale)
Work authorization: Export control: US citizen or national, US permanent resident, or admitted refugee/asylee required
Notes: Modem SoCs for the Amazon Leo (formerly Kuiper) LEO satellite constellation.

Read the posting

Lean 4 Proof Engineer - Mathematical Formalization at Alignerr

Thu, 22 Oct 2026 00:00:00 +0000

Where: Remote · Remote (worldwide)
Level: Engineer
Proof stack: Lean, Coq, Isabelle, Agda
Domain: AI for mathematics, AI training data
Pay: USD 170–200/hour (hourly contract, 10–40 hours/week)
Notes: Freelance AI-training contract (Alignerr is Labelbox's expert network). Translate informal proofs into Lean 4 and document where automated provers fail. Asks for a Master's or higher in mathematics, logic or theoretical CS.

Read the posting

STAGE 2027 Formalisation pour la spécification et l'architecture logicielle at Airbus

Thu, 24 Sep 2026 00:00:00 +0000

Where: Toulouse, France · On-site
Level: Intern
Proof stack: Rocq, F*, Lean, Idris, AADL, SysML
Domain: avionics, aerospace
Notes: Six months starting around March 2027, in the Avionics Software department (flight controls and related critical software).

Read the posting

Staff Formal Verification Engineer (GPU) at Advanced Micro Devices (AMD)

Thu, 18 Jun 2026 00:00:00 +0000

Where: Cambridge, United Kingdom · Hybrid
Level: Lead
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal, Murphi, theorem proving
Domain: hardware, GPU
Notes: Primary point of contact for formal across AMD's graphics IP. The scope includes exploring formalisation of the GPU ISA and memory model.

Read the posting

Lead Formal Verification Engineer at Advanced Micro Devices (AMD)

Fri, 09 Oct 2026 00:00:00 +0000

Where: Austin, TX / Orlando, FL / San Diego, CA · On-site
Level: Lead
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal, Murphi, theorem proving
Domain: hardware, GPU
Pay: USD 175,000–250,000 base (range in AMD careers listing data; not rendered as prose)
Work authorization: Not eligible for visa sponsorship (stated in posting)
Notes: Sets formal strategy for AMD graphics/GPU IP, including datapath, equivalence and security verification.

Read the posting

CPU Formal Verification Engineer at Advanced Micro Devices (AMD)

Thu, 16 Jul 2026 00:00:00 +0000

Where: Cambridge, United Kingdom · On-site
Level: Senior
Proof stack: SystemVerilog, SVA, JasperGold, VC Formal
Domain: hardware, CPU
Notes: CPU IP formal methodology, FPV/X-prop/DPV/SEC apps. The scope includes exploring formalisation of the ISA and memory models.

Read the posting

Compiler Developer (LLVM, C++) at Access Softek Toolchains

Mon, 18 Nov 2019 00:00:00 +0000

Where: Anywhere · Remote (worldwide)
Level: Engineer
Proof stack: LLVM, Clang, C++
Domain: compilers, toolchains
Work authorization: No restriction stated; "work from anywhere in the world"

Read the posting