Senior Infrastructure Security Engineer at Matter Labs

<h2><strong>About Matter Labs</strong></h2><p style="min-height:1.5em">Matter Labs builds private settlement infrastructure that lets regulated institutions settle directly with each other without exposing data, ceding control, or waiting days. Global finance moves $4 quadrillion a year on systems designed for paper and telex. The institutions that built them - from DTCC to NYSE to the world's largest banks are now actively replacing them. We're building what comes next.</p><p style="min-height:1.5em">Our core product, Prividium, gives each institution its own private settlement environment (a Prividium Zone) with independent governance and built-in interoperability across counterparties, asset classes, and jurisdictions. Settlement happens through zero-knowledge proofs: one party proves a transaction is valid without revealing any underlying data to the counterparty. The only private settlement infrastructure built on zero-knowledge cryptography.</p><p style="min-height:1.5em">Founded in 2018. Backed by a16z and Union Square Ventures. A fully remote team of around 90 with eight years of production zero-knowledge infrastructure behind us, now pointed at the biggest problem in institutional finance.</p><p style="min-height:1.5em"></p><h2><strong>About the role</strong></h2><p style="min-height:1.5em">Join Matter Labs as a <strong>Senior Infrastructure Security Engineer</strong> and help secure the corporate and production infrastructure that powers ZKsync. You'll own defenses across identity, endpoint, and detection-and-response. You'll partner closely with IT Ops, DevOps, Protocol Security, and Engineering to make security a default property of how we operate, not a checkpoint.</p><p style="min-height:1.5em">This role is ideal for someone who enjoys building durable detections instead of triaging noise, and is motivated by the mission of protecting open-source, decentralized infrastructure.</p><p style="min-height:1.5em">Matter Labs runs a deliberately lean, high-leverage security organization. You won't be one of fifty detection engineers. You'll own the corporate detection-and-response stack and have a direct line to the people building ZKsync. The work matters: this infrastructure protects an open-source ecosystem, the team behind it, and a meaningful chunk of value moving on Ethereum L2.</p><p style="min-height:1.5em"></p><h2><strong>Key Responsibilities</strong></h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em"><strong>Identity &amp; Collaboration Security</strong> Own the security configuration of our identity and collaboration stack: identity and access policies, third-party app governance, DLP, context-aware access, and admin audit. Drive least-privilege and phishing-resistant MFA across the org.</p></li><li><p style="min-height:1.5em"><strong>Detection &amp; Response</strong> Build, tune, and maintain detections. Design response playbooks for high-signal alerts, onboard new log sources, and own the detection-as-code pipeli