---
title: 'Senior Infrastructure Security Engineer at Matter Labs'
canonical: 'https://feeny.ai/job/senior-infrastructure-security-engineer-matter-labs-united-states-11rvdswgy8m1'
type: 'job'
last_seen: '2026-09-09'
---

# Senior Infrastructure Security Engineer at Matter Labs

- **Company:** Matter Labs
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-06-02
- **Last confirmed live:** 2026-09-09
- **Apply:** https://jobs.ashbyhq.com/matter-labs/c193ea99-6a1d-4b4a-845d-5ae69816076d

## Job description

## ABOUT MATTER LABS

Matter Labs builds private settlement infrastructure that lets regulated institutions settle directly with each other without exposing data, ceding control, or waiting days. Global finance moves $4 quadrillion a year on systems designed for paper and telex. The institutions that built them - from clearing houses to exchanges to the world's largest banks, institutions are now actively replacing them. We're building what comes next.

Our core product, Prividium, gives each institution its own private settlement environment (a Prividium Zone) with independent governance and built-in interoperability across counterparties, asset classes, and jurisdictions. Settlement happens through zero-knowledge proofs: one party proves a transaction is valid without revealing any underlying data to the counterparty. The only private settlement infrastructure built on zero-knowledge cryptography.

Founded in 2018. Backed by a16z and Union Square Ventures. A fully remote team of around 90 with eight years of production zero-knowledge infrastructure behind us, now pointed at the biggest problem in institutional finance.

## ABOUT THE ROLE

Join Matter Labs as a Senior Infrastructure Security Engineer and help secure the corporate and production infrastructure that powers ZKsync. You'll own defenses across identity, endpoint, and detection-and-response. You'll partner closely with IT Ops, DevOps, Protocol Security, and Engineering to make security a default property of how we operate, not a checkpoint.

This role is ideal for someone who enjoys building durable detections instead of triaging noise, and is motivated by the mission of protecting open-source, decentralized infrastructure.

Matter Labs runs a deliberately lean, high-leverage security organization. You won't be one of fifty detection engineers. You'll own the corporate detection-and-response stack and have a direct line to the people building ZKsync. The work matters: this infrastructure protects an open-source ecosystem, the team behind it, and a meaningful chunk of value moving on Ethereum L2.

## KEY RESPONSIBILITIES

- Identity & Collaboration Security Own the security configuration of our identity and collaboration stack: identity and access policies, third-party app governance, DLP, context-aware access, and admin audit. Drive least-privilege and phishing-resistant MFA across the org.
- Detection & Response Build, tune, and maintain detections. Design response playbooks for high-signal alerts, onboard new log sources, and own the detection-as-code pipeline. Reduce mean-time-to-detect and mean-time-to-respond on real incidents.
- Cloud & Infrastructure Security Harden our cloud footprint, Kubernetes clusters, and CI/CD pipelines. Review Infrastructure as Code for security regressions, embed guardrails, and partner with DevOps on secrets management and supply-chain controls.
- Endpoint Security Own the security posture of the endpoint estate, including MDM configuration, baseline hardening, EDR tuning, and endpoint telemetry. Make sure the controls hold up without making engineers' machines miserable to use.
- Incident Response Lead and participate in security incident investigations end-to-end: containment, forensics, root cause, remediation, and post-mortem. Improve runbooks and detections after every incident.
- Secure Systems Design Run threat models and architecture reviews for new internal systems and infrastructure changes. Translate findings into concrete, prioritized work, not lists of concerns.
- Cross-Team Collaboration Work alongside Protocol Security, DevOps, IT Ops, and Product Engineering. Raise risks constructively, write clearly, and influence without owning every system.

## WHAT WE'RE LOOKING FOR

## MUST HAVE

- 5+ years of hands-on infrastructure or detection-and-response security experience.
- Production experience securing a cloud-based identity and collaboration platform at scale, beyond default settings. You can speak to specific policies you've implemented, third-party app governance you've run, and incidents you've worked.
- Hands-on experience with a modern SIEM and SOAR: writing detections, onboarding log sources, building response playbooks, and tuning to reduce false positives.
- Strong cloud security background, including IAM, network controls, workload identity, and organization-level guardrails.
- Practical experience securing a macOS-dominant endpoint fleet: MDM, endpoint hardening baselines, and EDR. Comfort reasoning about Mac-specific attack paths and telemetry.
- Familiarity with Infrastructure as Code, secrets management, and security automation.
- Real incident response experience. You've been on-call for security and led investigations to conclusion.
- Clear, constructive technical communication across engineering and non-engineering stakeholders.

## NICE TO HAVE

- Blockchain / Web3 exposure. Familiarity with the security considerations of decentralized infrastructure, validator/sequencer operations, key management for on-chain systems, or hot/cold wallet ops. Bonus for Ethereum, Solidity, or ZK-related background.
- Compliance framework experience with SOC 2 and ISO 27001. Helped a security team build or maintain controls under one or both frameworks, including evidence collection, control design, working with auditors, and mapping technical safeguards to control criteria. Comfort translating compliance requirements into real engineering work, without letting compliance dictate the engineering.
- Kubernetes security (admission control, runtime detection, supply chain).
- Detection engineering as code: Git-based rule management, CI for detections, purple-team validation.
- Experience in lean security teams where you've owned a domain end-to-end rather than a narrow slice.

## WORK MODEL & PAY

- USA Remote: work wherever you’re most effective within the United States; optional travel to team or industry events.
- Freedom & ownership culture: no time tracking (where legally applicable), minimum bureaucracy-only results matter.

For more on how we work, check out our Team Handbook https://matterlabs.notion.site/

## About Matter Labs

## Company Overview
- **One-liner**: Matter Labs builds zkSync, a zero-knowledge proof-based scaling protocol for Ethereum, aiming to make cryptocurrency accessible to the mainstream.
- **Entity Type**: Private (latest round: Grant; total raised: $253.9M)
- **Headquarters**: George Town, Cayman Islands
- **Founded**: 2018
- **Founders**: Not publicly available from search results

## Core Business
- Primary industry: Blockchain infrastructure / Ethereum Layer 2 scaling
- Target customers: Developers, dApp teams, enterprises needing scalable blockchain solutions (B2B, Developer‑facing)
- Mission: “Scaling Ethereum with Zero Knowledge Proofs” – creating trustless, high‑throughput infrastructure to enable mass adoption of decentralized applications.

## Products & Services
- **[zkSync Era](https://matter-labs.io/)**: A zero‑knowledge rollup (ZK‑rollup) that provides high‑throughput, low‑cost transactions while inheriting Ethereum’s security. (Protocol / Infrastructure)
- **[zkSync Lite](https://matter-labs.io/)**: A lighter, earlier version of the ZK‑rollup, focused on payments and token transfers. (Protocol / Infrastructure)
- **Era Contracts ([era-contracts](https://github.com/matter-labs/era-contracts))**: Smart contract module for zkSync Era. (Open‑source software library)
- **Developer Documentation & Tools**: Comprehensive docs for zkSync Era and Lite, a web wallet, and various SDKs – all available on their [GitHub](https://github.com/matter-labs/).

## Market Standing
- **Valuation / Market Cap**: Not disclosed
- **Key Metric**: **Total Funding** – $253.9M raised across multiple rounds (latest: Grant in 2024, per CBInsights)
- **Notable Investors**: Google Web3 startup program, Dragonfly, Andreessen Horowitz, Variant Equity, LongHash Ventures, and 32+ other investors
- **Growth Signals**: 
  - ~127 total employees (BuiltIn)
  - 231 public repositories with 4889 GitHub followers
  - zkSync Era mainnet launched in 2023, rapidly gaining TVL and developer mindshare
  - Active hiring across engineering, product, and ecosystem roles

## Competitive Advantages
- **Pioneer in ZK‑rollups**: Matter Labs was among the earliest teams to ship a production ZK‑rollup on Ethereum, giving it a head start in technology and community.
- **Open‑source ethos**: All core code is publicly available on GitHub, fostering trust and a strong developer ecosystem.
- **Focus on security and decentralization**: zkSync Era is designed to be fully trustless, leveraging the same security guarantees as Ethereum.

## Strategic Focus
- **Scaling Ethereum**: Continue to improve throughput and reduce costs while maintaining Ethereum compatibility.
- **Ecosystem expansion**: Attracting dApps, bridges, and tools to the zkSync ecosystem; fostering partnerships with DeFi protocols and infrastructure providers.
- **Developer experience**: Enhancing documentation, SDKs, and developer tooling to lower the barrier for building on zkSync.

## Why Work Here
- **Remote‑friendly**: Matter Labs offers a remote work program; typical on‑site time is “none” (BuiltIn data). The team is distributed worldwide.
- **Engineering‑driven culture**: Deep focus on cryptography, blockchain research, and open‑source contributions. Employees work on cutting‑edge zero‑knowledge technology.
- **Impact**: Directly contribute to scaling Ethereum, a core infrastructure challenge in crypto. Role in shaping the future of decentralized applications.
- **Perks**: BuiltIn lists general perks and benefits (specifics not detailed). The company actively maintains a “we’re always hiring” stance, with roles listed on [Ashby](https://jobs.ashbyhq.com/matter-labs).
- **Office location**: While HQ is in Cayman Islands, teams operate remotely; there is also a Kentucky, USA presence noted in some sources.

## Sources
1. [matter-labs.io](https://matter-labs.io/)
2. [jobs.ashbyhq.com/matter-labs](https://jobs.ashbyhq.com/matter-labs)
3. [builtin.com/company/matter-labs](https://builtin.com/company/matter-labs)
4. [github.com/matter-labs](https://github.com/matter-labs/)
5. [cbinsights.com/company/matter-labs](https://www.cbinsights.com/company/matter-labs)

## Other roles at Matter Labs

- [Solutions Engineer, Institutional](https://feeny.ai/job/solutions-engineer-institutional-matter-labs-new-york-wfd43jyrktf4) — New York, NY
- [Account Executive, Institutional Sales](https://feeny.ai/job/account-executive-institutional-sales-matter-labs-new-york-ze6qxjhp0esa) — New York, NY
- [Account Executive, Financial Markets](https://feeny.ai/job/account-executive-financial-markets-matter-labs-london-8nck3zf1tbnp) — London, United Kingdom
- [Protocol Security Engineer](https://feeny.ai/job/protocol-security-engineer-matter-labs-global-4290cyefe56y) — Global
- [Senior Infrastructure Security Engineer](https://feeny.ai/job/senior-infrastructure-security-engineer-crusoe-dublin-2kcsjwqs47s5) — Dublin, Ireland