Protocol Security Engineer
Matter Labs · Remote
MeritLog read this listing from Matter Labs's Ashby job board and last checked it on September 12, 2026.
Source: the employer's Ashby job board. Open the original listing for current details.
Job details
- Work model
- Remote
- Salary
- From $4 per year
- Location
- Global Remote
- Company website
- matterlabs.notion.site
Hiring context
How this role compares at Matter Labs
Matter Labs has 5 live roles in MeritLog’s catalog across 2 job families, and 3 of them are in engineering. 0 of those listings publish a pay range, a disclosure rate of 0%.
Matter Labs concentrates this hiring in:
Counted across the job boards MeritLog tracks, at the time this page was served. Pay comparisons use only listings that publish a complete range in the same currency and period.
What the role asks for
What you'd do
- Break things on purpose. Threat-model and review Solidity contracts, blockchain state transition functions in Rust, and other critical systems before an attacker gets the chance.
- Own protocol components. Take responsibility for the secure architecture and implementation of the components you adopt, from design review through production.
- Track the adversary. Follow hacks, exploits, and new attack vectors across the industry and convert the lessons into concrete improvements in our systems.
- Scale security through others. Embed secure-design practice across development teams and influence architecture decisions early, without formal authority.
- Use AI on defense. Apply modern AI systems to scale security work, while accounting for attackers using the same tools.
- Respond when it counts. Join security investigations and incident response, often under time pressure with incomplete information.
- A record in security engineering or security research: threat modeling, security-focused code review, or vulnerability research on production systems, with findings you can walk through mechanism by mechanism.
- Proficiency in strongly typed languages such as C++, Go, or Scala. Rust and Solidity are our primary languages, and prior experience with them is not required.
- Deep grounding in algorithms and data structures, including their computational and memory complexity, with experience implementing them from scratch.
- Protocol-level debugging and root-cause analysis on complex distributed systems.
- Working knowledge of recent security incidents in the blockchain space and the prevention techniques behind them.
- Clear written and spoken English, the company's working language.
What they're asking for
- Competitive base salary. Matter Labs applies no geographic pay discounts.SkillPreferred
- Performance-based variable compensation with a defined annual target is additional. The plan may pay in ZK tokens or cash. A long-term token incentive is also additional and is paid in ZK tokens, with new-hire grants vesting over four years and a one-year cliff.SkillPreferred
- Fully Remote. Occasional travel to team gatherings and industry events.SkillPreferred
- Freedom & ownership culture: no time tracking (where legally applicable), minimum bureaucracy-only results matter.SkillPreferred
Parsed by MeritLog from the employer’s own posting. The full description follows below.
Job description
ABOUT MATTER LABS Matter Labs builds private settlement infrastructure that lets regulated institutions settle directly with each other without exposing data, ceding control, or waiting days. Global finance moves $4 quadrillion a year on systems designed for paper and telex. The institutions that built them - from clearing houses to exchanges to the world's largest banks, institutions are now actively replacing them. Our core product, Prividium, gives each institution its own private settlement environment (a Prividium Zone) with independent governance and built-in interoperability across counterparties, asset classes, and jurisdictions. Settlement happens through zero-knowledge proofs: one party proves a transaction is valid without revealing any underlying data to the counterparty. The only private settlement infrastructure built on zero-knowledge cryptography. Founded in 2018. Backed by a16z and Union Square Ventures. A fully remote team of around 70 with eight years of production zero-knowledge infrastructure behind us, now pointed at the biggest problem in institutional finance. THE ROLE You will protect ZKsync's core: smart contracts, ZK circuits, and blockchain nodes. Your reviews, threat models, and incident work decide whether vulnerabilities are found by us or by attackers. The role owns internal security reviews of critical components, threat modeling, adversary research, and the security side of incident response, and it carries broad license to spot gaps and fix them beyond any assigned list. It is a hands-on individual contributor role for someone who wants to know how things break and applies that instinct ethically where the stakes are high. WHAT YOU'LL DO - Break things on purpose. Threat-model and review Solidity contracts, blockchain state transition functions in Rust, and other critical systems before an attacker gets the chance. - Own protocol components. Take responsibility for the secure architecture and implementation of the components you adopt, from design review through production. - Track the adversary. Follow hacks, exploits, and new attack vectors across the industry and convert the lessons into concrete improvements in our systems. - Scale security through others. Embed secure-design practice across development teams and influence architecture decisions early, without formal authority. - Use AI on defense. Apply modern AI systems to scale security work, while accounting for attackers using the same tools. - Respond when it counts. Join security investigations and incident response, often under time pressure with incomplete information. WHAT WE LOOK FOR Each of these is a demonstrated capability, shown through work you have done: - A record in security engineering or security research: threat modeling, security-focused code review, or vulnerability research on production systems, with findings you can walk through mechanism by mechanism. - Proficiency in strongly typed languages such as C++, Go, or Scala. Rust and Solidity are our primary languages, and prior experience with them is not required. - Deep grounding in algorithms and data structures, including their computational and memory complexity, with experience implementing them from scratch. - Protocol-level debugging and root-cause analysis on complex distributed systems. - Working knowledge of recent security incidents in the blockchain space and the prevention techniques behind them. - Clear written and spoken English, the company's working language. If you meet most of these and believe you can do this job, apply anyway. NICE TO HAVE Hands-on experience with Solidity smart contracts, ZK circuits, or core blockchain protocols. Public security research, audit reports, bug-bounty results, or CTF history all count as evidence. WORK MODEL & PAY - Competitive base salary. Matter Labs applies no geographic pay discounts. - Performance-based variable compensation with a defined annual target is additional. The plan may pay in ZK tokens or cash. A long-term token incentive is also additional and is paid in ZK tokens, with new-hire grants vesting over four years and a one-year cliff. - Fully Remote. Occasional travel to team gatherings and industry events. - Freedom & ownership culture: no time tracking (where legally applicable), minimum bureaucracy-only results matter.
Keep exploring