No applications. Teams find and message you directly.
Join Matter Labs as a Protocol Security Engineer to enhance security in blockchain systems through proactive threat modeling, incident response, and secure design practices.
Matter Labs is focused on building zkSync, a layer-2 scaling solution for Ethereum that utilizes zero-knowledge rollups to enhance scalability and privacy.
- Break things on purpose. Threat-model and review Solidity contracts, blockchain state transition functions in Rust, and other critical systems before an attacker gets the chance.
- Own protocol components. Take responsibility for the secure architecture and implementation of the components you adopt, from design review through production.
- Track the adversary. Follow hacks, exploits, and new attack vectors across the industry and convert the lessons into concrete improvements in our systems.
- Scale security through others. Embed secure-design practice across development teams and influence architecture decisions early, without formal authority.
- Use AI on defense. Apply modern AI systems to scale security work, while accounting for attackers using the same tools.
- Respond when it counts. Join security investigations and incident response, often under time pressure with incomplete information.
- A record in security engineering or security research: threat modeling, security-focused code review, or vulnerability research on production systems, with findings you can walk through mechanism by mechanism.
- Proficiency in strongly typed languages such as C++, Go, or Scala. Rust and Solidity are our primary languages, and prior experience with them is not required.
- Deep grounding in algorithms and data structures, including their computational and memory complexity, with experience implementing them from scratch.
- Protocol-level debugging and root-cause analysis on complex distributed systems.
- Working knowledge of recent security incidents in the blockchain space and the prevention techniques behind them.
- Clear written and spoken English, the company's working language.
- Nice to have: Hands-on experience with Solidity smart contracts, ZK circuits, or core blockchain protocols. Public security research, audit reports, bug-bounty results, or CTF history all count as evidence.