Matter Labs
Protocol Security Engineer
2 нед. назад
Страна неизвестнаSeniorRemoteC1
solidityrustc++goscalathreat modelingprotocol debuggingalgorithms
Protocol Security Engineer role at Matter Labs for securing blockchain protocol components with a focus on Solidity and Rust, working remotely globally.
Обязанности
- Break things on purpose. Threat-model and review Solidity contracts, blockchain state transition functions in Rust, and other critical systems before an attacker gets the chance.
- Own protocol components. Take responsibility for the secure architecture and implementation of the components you adopt, from design review through production.
- Track the adversary. Follow hacks, exploits, and new attack vectors across the industry and convert the lessons into concrete improvements in our systems.
- Scale security through others. Embed secure-design practice across development teams and influence architecture decisions early, without formal authority.
- Use AI on defense. Apply modern AI systems to scale security work, while accounting for attackers using the same tools.
- Respond when it counts. Join security investigations and incident response, often under time pressure with incomplete information.
Требования
- A record in security engineering or security research: threat modeling, security-focused code review, or vulnerability research on production systems, with findings you can walk through mechanism by mechanism.
- Proficiency in strongly typed languages such as C++, Go, or Scala. Rust and Solidity are our primary languages, and prior experience with them is not required.
- Deep grounding in algorithms and data structures, including their computational and memory complexity, with experience implementing them from scratch.
- Protocol-level debugging and root-cause analysis on complex distributed systems.
- Working knowledge of recent security incidents in the blockchain space and the prevention techniques behind them.
- Clear written and spoken English, the company's working language.
Будет плюсом
- Hands-on experience with Solidity smart contracts, ZK circuits, or core blockchain protocols.
- Public security research, audit reports, bug-bounty results, or CTF history all count as evidence.