Protocol Security Engineer
We are seeking a Protocol Security Engineer to join our Security Team. This role blends hands-on security work with the opportunity to influence protocol security from the earliest stages of development. You'll focus on safeguarding ZKsync's core componentssmart contracts, ZK circuits, and blockchain nodeswhile staying at the forefront of security research and industry best practices.
This role is ideal for someone who is curious, thrives on breaking systems, and wants to apply that mindset ethically in a high-stakes environment.
What You'll Be Doing
- Intentionally breaking things conducting threat modeling and internal reviews of Solidity contracts, blockchain state transition functions (Rust), and other critical systems
- Tracking the latest hacks, exploits, and attack vectors across the industry, and translating lessons learned into actionable security improvements
- Embedding security best practices across development teams and influencing secure design
- Taking ownership of protocol components with a focus on secure architecture and implementation
- Participating in security investigations and incident response, often under time-sensitive and high-pressure conditions
What We're Looking For
Curiosity & hacker mindset you want to know how things break, not just how they workStrong security instincts with the ability to anticipate adversarial behaviorsFamiliarity with recent security incidents in the blockchain space and knowledge of prevention techniquesPractical experience with Solidity smart contracts, ZK circuits, or core blockchain protocols (preferred but not required)Comfort with protocol-level debugging and root-cause analysisProficiency in strongly typed languages (e.g., C++, Scala, Go); Rust and Solidity are our primary languages, but prior experience with them is not mandatoryDeep understanding of algorithms, data structures, and their computational / memory complexitiesExperience implementing data structures and algorithms from scratchFluent written and spoken English