Senior Infrastructure Security Engineer

At Matter Labs, we believe freedom drives progress and prosperity. We don’t see ourselves as a company, but as a team aligned around a single mission: to advance personal freedom for all (see ZK Credo).

To achieve this goal, we’re building zkSync -a credibly neutral, fully open source technology stack and network on top of Ethereum, which is owned and governed by its community. We use advanced cryptography called zero-knowledge proofs to scale Ethereum infinitely without compromising on security or decentralization. With a world-class team, a community of over 1M supporters across Twitter and Discord, and hundreds of millions of dollars in funding, we have the resources to achieve our mission.

The Role

Join Matter Labs as a Senior Security Engineer (Infrastructure) and play a critical role in securing the infrastructure that powers zkSync. You’ll work across cloud, application, and systems layers to build and maintain robust defenses. Partnering closely with DevOps, engineering, and protocol security to embed security into everything we ship.

This role is ideal for someone who thrives in high-impact environments, enjoys solving complex technical challenges, and is motivated by the mission of protecting open-source and decentralized infrastructure.

Key Responsibilities

• Infrastructure & Cloud Security
  
  

Design and implement secure infrastructure; including hardening cloud environments, containers, and CI/CD pipelines.

• Detection & Response Readiness
  
  

Help build detection and monitoring systems (e.g., SIEM, alerting pipelines) to ensure early threat detection and effective incident response.

• Secure Systems Design
  
  

Collaborate with engineers and DevOps to identify security risks in architecture reviews, system upgrades, and deployment plans.

• Infrastructure as Code (IaC)
  
  

Contribute to the design and review of Terraform, Ansible, or similar IaC, ensuring security is embedded from the ground up.

• Security Reviews & Remediation
  
  

Participate in threat modeling, internal audits, and hands-on vulnerability remediation across our stack.

• Cross-Team Collaboration
  
  

Work closely with Protocol Security, DevOps, and Product Engineering to align on shared security goals and ensure coverage across the full lifecycle.

• Optional: On-chain Infra Anomaly Detection
  
  

Help implement tools to detect unusual infrastructure-level activity from on-chain signals (e.g., misuse of credentials or suspicious deployment patterns).

What We're Looking For

• Strong Infrastructure Security Background
  
  

Hands-on experience securing cloud-native environments (e.g., AWS, GCP), Kubernetes, CI/CD pipelines, and internal systems.

• Deep Technical Fluency
  
  

Practical knowledge of threat modeling, incident response, vulnerability management, and systems architecture.

• IaC & DevSecOps Mindset
  
  

Familiarity with Infrastructure as Code (Terraform, etc.), secrets management, and security automation tooling.

• Bias for Action
  
  

A self-starter who’s comfortable with ambiguity and can drive security work through delivery — not just assessment.

• Collaborative Communicator
  
  

Able to partner across teams, raise risks constructively, and translate complex security concepts to technical and non-technical stakeholders.

• Web3 Awareness (Nice to Have)
  
  

Familiarity with the security considerations of decentralized infrastructure and open-source ecosystems. Bonus for knowledge of Ethereum, Solidity, or ZK-related tech.

Working at Matter Labs

At Matter Labs, you have the freedom to work how you want, when you want, and from where you want. All positions are 100% remote (with optional travel to team or industry events). We operate in lean, high-impact teams with minimal bureaucracy and no time tracking - only results matter. You’ll have everything you need to learn, grow, and be productive.

We believe anyone who shares our mission can thrive here - regardless of background, gender, or location. That’s why we foster a culture of respect, autonomy, and ownership.

What We Offer

• Competitive compensation
• Equity and token package
• 100% coverage for health, dental, and vision insurance
• 16 weeks of parental leave
• Flexible paid time off
• Company closure weeks 1–2x per year
• $2000 USD work equipment stipend
• $300 USD monthly co-working allowance
• $500 USD learning & development stipend
• 401k plan (US only)