Protocol Security Engineer
Matter Labs is the engineering company behind Prividium, an Ethereum-secured private blockchain platform for banks and financial institutions, and ZKsync, a public zero-knowledge blockchain network.
Funding history
Projects
About Matter Labs
Matter Labs builds Prividium for regulated institutions to issue, settle, and manage digital assets with privacy, compliance, and control of institutional data. Its technology stack includes ZK Stack, ZKsync Connect, Airbender, and the public ZKsync network of Ethereum-secured chains.
Skills
About the Role
You will protect smart contracts ZK circuits and blockchain nodes. You will conduct security reviews threat modeling and adversary research identify vulnerabilities in critical protocol components influence secure architecture and implementation track emerging attacks apply AI to defensive security work and support investigations and incident response.
Requirements
- Demonstrated capability in security engineering or security research including threat modeling security-focused code review or vulnerability research on production systems
- Proficiency in strongly typed languages such as C++ Go or Scala
- Deep grounding in algorithms and data structures including computational and memory complexity
- Experience implementing algorithms and data structures from scratch
- Protocol-level debugging and root-cause analysis on complex distributed systems
- Working knowledge of recent blockchain security incidents and their prevention techniques
- Clear written and spoken English
- Hands-on experience with Solidity smart contracts ZK circuits or core blockchain protocols is preferred
- Public security research audit reports bug-bounty results or CTF history are valued
Responsibilities
- Threat-model and review Solidity contracts Rust blockchain state transition functions and other critical systems
- Own the secure architecture and implementation of adopted protocol components from design review through production
- Track industry hacks exploits and attack vectors and convert lessons into system improvements
- Embed secure-design practices across development teams and influence architecture decisions
- Apply modern AI systems to scale defensive security work while accounting for attacker use
- Join security investigations and incident response under time pressure and incomplete information
Benefits
- Global fully remote work
- No geographic pay discounts
- Long-term token incentive paid in ZK tokens with four-year vesting and a one-year cliff
- No time tracking where legally applicable
