Protocol Security Engineer

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Safeguard ZKsync's essential components, including smart contracts, ZK circuits, and blockchain nodes.

• Perform internal security assessments of vital elements.

• Conduct threat modeling and review Solidity contracts, Rust blockchain state transition functions, and other significant systems.

• Take ownership of secure architecture and the implementation of adopted protocol components from the design review phase to production.

• Monitor industry hacks, exploits, and emerging attack vectors, transforming lessons learned into system enhancements.

• Advocate for secure design practices across development teams and influence architectural decisions at an early stage.

• Leverage modern AI technologies to scale defensive security efforts while considering the utilization of AI by attackers.

• Engage in security investigations and incident response under tight deadlines and with incomplete information.

⛳️ Requirements

• Proven experience in security engineering or security research, encompassing threat modeling, security-focused code reviews, or vulnerability research on live systems.

• Ability to articulate security findings on a mechanism-by-mechanism basis.

• Proficiency in strongly typed programming languages such as C++, Go, or Scala.

• Strong foundation in algorithms and data structures, including computational and memory complexities.

• Experience in implementing algorithms and data structures from the ground up.

• Expertise in protocol-level debugging and root-cause analysis of complex distributed systems.

• Familiarity with recent blockchain security incidents and preventative measures.

• Excellent written and verbal communication skills in English.

• Practical experience with Solidity smart contracts, ZK circuits, or core blockchain protocols is a plus.

• Background in public security research, audit reports, bug-bounty achievements, or CTF participation is desirable.

🏝️ Benefits

• Competitive base salary with no geographical pay disparities.

• Performance-driven variable compensation with a specified annual target; may be disbursed in ZK tokens or cash.

• Long-term token incentives provided in ZK tokens.

• New-hire token grants vesting over four years with a one-year cliff.

• Fully remote work environment.

• Occasional travel for team gatherings and industry events.

• No time tracking required (where legally permissible).

• Minimal bureaucracy; results are what matter.