Remote Protocol Security Engineer (ZK/Blockchain)

Delphiventures; Alexandria (VA); Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Remote work

No time tracking

Travel to team gatherings and industry

Job summary

Matter Labs is seeking a senior security-focused engineer to protect ZKsync core components, including smart contracts, zero-knowledge circuits, and blockchain nodes. You will lead threat modeling, code reviews, and incident response, with a hands-on approach to finding and fixing vulnerabilities.

The role emphasizes secure architecture, adversary research, and cross-team security advocacy, with opportunities to shape the security posture of critical distributed systems.

Qualifications

• Experience in security engineering or security research with threat modeling, code review, or vulnerability research on production systems.
• Strong coding experience in systems/programming languages and ability to reason about security implications.
• Familiarity with blockchain or distributed systems security concepts is a plus.
• Clear written and spoken English, the company's working language.
• Proficiency with Rust and Solidity is beneficial; prior experience not required.

Responsibilities

• Conduct threat modeling and review of Solidity contracts and blockchain state transition functions.
• Own secure architecture and implementation of protocol components from design to production.
• Track adversaries by following hacks, exploits, and new attack vectors and translate lessons into concrete improvements.
• Scale secure design practices across development teams and influence architecture decisions early.
• Apply modern AI tools to augment security work while anticipating attacker use of similar tools.
• Participate in security investigations and incident response under time-sensitive conditions.

Skills

Security engineering

Threat modeling

Security-focused code review

Vulnerability research

English communication

Tools

C++

Go

Scala

Rust

Solidity

Job description

Matter Labs is seeking a senior security-focused engineer to protect ZKsync core components, including smart contracts, zero-knowledge circuits, and blockchain nodes. You will lead threat modeling, code reviews, and incident response, with a hands-on approach to finding and fixing vulnerabilities.

The role emphasizes secure architecture, adversary research, and cross-team security advocacy, with opportunities to shape the security posture of critical distributed systems.