Senior Infrastructure Security Engineer
Skills
About the Role
You will secure the infrastructure that powers zkSync across cloud, application, and systems layers. You will design and harden cloud environments, containers, and CI/CD pipelines, and implement Infrastructure as Code securely. You will build detection and monitoring systems (for example SIEM and alerting pipelines), run threat modeling and architecture reviews, perform hands-on vulnerability remediation and incident response, and collaborate closely with DevOps, engineering, and protocol security. Optionally, you may help design on-chain infrastructure anomaly detection based on on-chain signals.
Requirements
- Hands-on experience securing cloud-native environments (AWS, GCP), Kubernetes, CI/CD pipelines, and internal systems
- Practical knowledge of threat modeling, incident response, vulnerability management, and systems architecture
- Familiarity with Infrastructure as Code (Terraform, etc.), secrets management, and security automation tooling
- Ability to drive security work to delivery and operate with a bias for action
- Strong communication skills to translate security concepts to technical and non-technical stakeholders
- Web3 awareness and familiarity with decentralized infrastructure (Ethereum, Solidity, ZK) is a plus
Responsibilities
- Design and implement secure infrastructure, hardening cloud environments, containers, and CI/CD pipelines
- Build detection and monitoring systems such as SIEM and alerting pipelines
- Identify security risks during architecture reviews, system upgrades, and deployment plans
- Design and review Infrastructure as Code (Terraform, Ansible) for security
- Participate in threat modeling, internal audits, and hands-on vulnerability remediation
- Collaborate with Protocol Security, DevOps, and Product Engineering to align security goals
- Implement on-chain infrastructure anomaly detection (optional)
Benefits
- Competitive compensation, equity, and token package
- Premium health, dental, and vision coverage
- 16 weeks paid parental leave
- Flexible paid time off plus company-wide closure weeks
- $2,000 equipment stipend
- $300 monthly co-working allowance