Protocol Security Engineer

About the role

Matter Labs is looking for a Protocol Security Engineer to protect the core of ZKsync, including smart contracts, zero‑knowledge circuits, and blockchain nodes. You will lead internal security reviews, threat modeling, and incident response for critical components.

Key responsibilities

• Conduct security reviews and threat‑model Solidity contracts, Rust state‑transition functions and other critical systems.
• Own the secure architecture and implementation of protocol components from design through production.
• Track industry hacks and attack vectors, translating lessons into concrete system improvements.
• Embed secure‑design practices across development teams and influence early architecture decisions.
• Apply modern AI tools to scale security work while considering adversarial use.
• Participate in security investigations and incident response under time pressure.

Required profile

• Proven experience in security engineering or research, including threat modeling, code review, or vulnerability research on production systems.
• Strong grounding in algorithms, data structures, and their computational/memory complexity.
• Experience with protocol‑level debugging and root‑cause analysis of distributed systems.
• Knowledge of recent blockchain security incidents and mitigation techniques.
• Clear written and spoken English.

Required skills

• Strongly typed programming languages such as C++, Go, or Scala.
• Familiarity with Rust and Solidity (experience not required but beneficial).
• Understanding of zero‑knowledge circuits and blockchain protocols.
• Threat modeling, security‑focused code review, and vulnerability research.

What we offer

• Competitive base salary with no geographic pay discounts.
• Performance‑based variable compensation, payable in cash or ZK tokens.
• Long‑term token incentive with four‑year vesting.
• Fully remote work with occasional travel for team gatherings and events.
• Freedom & ownership culture with minimal bureaucracy.