Remote Protocol Security Engineer — ZK & Incident Response

Matter Inc.; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Matter Labs is seeking a hands-on security engineer to protect ZKsync's core: smart contracts, ZK circuits, and blockchain nodes. You will perform threat modeling, security reviews, and incident response, with broad license to fix gaps beyond assigned tasks.

You will break things on purpose, track adversaries, and help scale secure design across development teams. Proficiency in Rust and Solidity is valued; strong English communication is essential as we operate a fully remote, asynchronous team.

Qualifications

• Security engineering or security research experience with production systems.
• Threat modeling and security-focused code review demonstrated.
• Proficiency in Rust and Solidity; strong typed languages preferred.
• Deep understanding of algorithms and data structures.
• Protocol-level debugging and root-cause analysis in distributed systems.
• Familiarity with blockchain incidents and prevention techniques.

Responsibilities

• Threat-model and review Solidity contracts and Rust components before attackers do.
• Own secure architecture and implementation of adopted protocol components.
• Track adversaries by following hacks and new attack vectors in the industry.
• Scale security by embedding secure-design practices across development teams.
• Apply AI tools to defense while accounting for attackers using the same tools.
• Respond to security investigations and incidents under time pressure.

Skills

Security engineering

Security research

Threat modeling

Rust

Solidity

Algorithms

Data structures

English proficiency

Job description

Matter Labs is seeking a hands-on security engineer to protect ZKsync's core: smart contracts, ZK circuits, and blockchain nodes. You will perform threat modeling, security reviews, and incident response, with broad license to fix gaps beyond assigned tasks.

You will break things on purpose, track adversaries, and help scale secure design across development teams. Proficiency in Rust and Solidity is valued; strong English communication is essential as we operate a fully remote, asynchronous team.