About the role
Matter Labs, the team behind zkSync, is hiring a Protocol Security Engineer to own security across its blockchain infrastructure from design through production. It's a fully remote role for someone who thinks like an attacker and wants to help secure protocol-level code that real users and real value depend on.
Responsibilities
- Threat-model and review Solidity smart contracts and Rust blockchain code
- Own the security of protocol components from initial design through production deployment
- Track emerging exploits and hacks across the industry and feed lessons back into Matter Labs' own systems
- Help embed secure-development practices across engineering teams
- Apply AI tooling to strengthen security operations and review workflows
- Take part in security investigations and incident response when issues arise
Requirements
- Demonstrated background in security engineering or security research — threat modeling, code review, vulnerability research
- Strong skills in at least one strongly-typed language such as C++, Go, or Scala; Rust and Solidity preferred but not required
- Solid grounding in algorithms, data structures, and real implementation experience
- Protocol-level debugging experience on distributed systems
- Current knowledge of blockchain security incidents and how to prevent them
- Nice to have: hands-on Solidity, ZK circuit, or blockchain protocol experience, plus public security research, audits, bug bounties, or CTF results
What we offer
- Competitive base salary with no geographic pay discount
- Performance-based variable compensation, payable in ZK tokens or cash
- Long-term token incentive plan (4-year vesting, 1-year cliff)
- Minimal bureaucracy and no mandatory time tracking where legally permitted
- Fully remote, results-focused team culture