Protocol Security Engineer
Matter Labs is an engineering company building Prividium, a private, permissioned, Ethereum-secured blockchain platform for banks and financial institutions. It also develops ZKsync and the zero-knowledge technology stack behind its blockchain products.
Maintainer signals as of 8/23/2026
Funding history
Projects
About Matter Labs
Matter Labs builds blockchain infrastructure and zero-knowledge technology for regulated finance and Ethereum scaling. Its primary enterprise product, Prividium, enables banks, asset managers, fund administrators, and payment operators to issue, settle, and manage digital assets on private, permissioned chains while maintaining compliance, privacy, and Ethereum settlement finality. The company also builds the open-source ZK Stack, Atlas and Airbender proving technology, ZKsync Connect, and the public ZKsync network.
Skills
About the Role
You will protect smart contracts ZK circuits and blockchain nodes. You will conduct security reviews threat modeling and adversary research identify vulnerabilities in critical protocol components influence secure architecture and implementation track emerging attacks apply AI to defensive security work and support investigations and incident response.
Requirements
- Demonstrated capability in security engineering or security research including threat modeling security-focused code review or vulnerability research on production systems
- Proficiency in strongly typed languages such as C++ Go or Scala
- Deep grounding in algorithms and data structures including computational and memory complexity
- Experience implementing algorithms and data structures from scratch
- Protocol-level debugging and root-cause analysis on complex distributed systems
- Working knowledge of recent blockchain security incidents and their prevention techniques
- Clear written and spoken English
- Hands-on experience with Solidity smart contracts ZK circuits or core blockchain protocols is preferred
- Public security research audit reports bug-bounty results or CTF history are valued
Responsibilities
- Threat-model and review Solidity contracts Rust blockchain state transition functions and other critical systems
- Own the secure architecture and implementation of adopted protocol components from design review through production
- Track industry hacks exploits and attack vectors and convert lessons into system improvements
- Embed secure-design practices across development teams and influence architecture decisions
- Apply modern AI systems to scale defensive security work while accounting for attacker use
- Join security investigations and incident response under time pressure and incomplete information
Benefits
- Global fully remote work
- No geographic pay discounts
- Long-term token incentive paid in ZK tokens with four-year vesting and a one-year cliff
- No time tracking where legally applicable
