Protocol Security Engineer

Matter Labs · Remote · Global Remote ·
Fully remoteFull-timeMiddle3–5 years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Fully remote worldwide
  • Security Engineering
  • Rust + Solidity
  • Zero-knowledge tech
  • No geo-pay discount

You will protect the core of ZKsync by reviewing Solidity contracts, Rust state transitions, and blockchain nodes. The position requires hands-on security engineering, including threat modeling, adversary research, and leading incident response efforts.

Matter Labs builds Prividium, a private settlement infrastructure using zero-knowledge proofs. The team operates remotely with a focus on results and minimal bureaucracy, backed by major venture capital firms.

What you'll do

  • Threat-model and review Solidity contracts and Rust code before deployment
  • Own secure architecture and implementation of adopted protocol components
  • Track industry hacks and convert lessons into system improvements
  • Embed secure-design practices across development teams
  • Apply AI systems to scale security defense capabilities
  • Participate in security investigations and incident response under pressure

What you'll need

  • Proven record in security engineering, research, or vulnerability analysis
  • Proficiency in strongly typed languages like C++, Go, or Scala
  • Deep understanding of algorithms, data structures, and complexity
  • Experience debugging complex distributed systems at the protocol level
  • Knowledge of recent blockchain security incidents and prevention techniques
  • Clear written and spoken English communication skills

Nice to have

  • Hands-on experience with Solidity, ZK circuits, or core blockchain protocols
  • Public security research, audit reports, or bug-bounty results
  • History of participation in Capture The Flag (CTF) competitions

Stack

  • Solidity
  • Rust
  • C++
  • Go
  • Scala
  • Zero-knowledge proofs

How you'll work

  • Fully remote with occasional travel for team gatherings
  • No geographic pay discounts applied
  • No time tracking where legally applicable
  • Results-oriented culture with minimum bureaucracy

What you get

  • Competitive base salary
  • Performance-based variable compensation in cash or ZK tokens
  • Long-term token incentive grants vesting over four years
  • One-year cliff for new-hire token grants