Remote Protocol Security Engineer for ZK Infrastructure

cyber; Alexandria, Northern (VA, KY); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Remote work

Token incentives

Job summary

Matter Labs is seeking a senior security engineer to protect ZKsync's core—smart contracts, ZK circuits, and blockchain nodes. You will review threat models and incident work, deciding vulnerabilities discovered by internal teams or attackers.

This hands-on role carries broad latitude to identify gaps, own protocol components, track adversaries, and scale secure design across development teams. Expect remote work with occasional travel.

Qualifications

• A track record in security engineering or security research with threat modeling and vulnerability discovery.
• Proficiency in strongly typed languages; Rust and Solidity are primary, prior experience not required.
• Strong grasp of algorithms and data structures, including experience implementing them from scratch.
• Experience debugging and root-cause analysis in distributed systems.
• Knowledge of recent blockchain security incidents and prevention techniques.
• Clear written and spoken English.

Responsibilities

• Break things on purpose by threat-modeling and reviewing contracts and state transitions before attackers do.
• Own protocol components from design review to production.
• Track adversaries by analyzing hacks, exploits, and new attack vectors.
• Scale security practices across teams by embedding secure design early.
• Apply modern AI to strengthen defense while countering attackers using the same tools.
• Respond to incidents and participate in investigations under time pressure.

Skills

Security engineering

Threat modeling

Code review

Vulnerability research

Rust

Solidity

C++

Go

Scala

Algorithms

Data structures

Distributed systems

Blockchain knowledge

English fluency

Tools

C++

Go

Rust

Solidity

Job description

Matter Labs is seeking a senior security engineer to protect ZKsync's core—smart contracts, ZK circuits, and blockchain nodes. You will review threat models and incident work, deciding vulnerabilities discovered by internal teams or attackers.

This hands-on role carries broad latitude to identify gaps, own protocol components, track adversaries, and scale secure design across development teams. Expect remote work with occasional travel.