Senior Security Engineer, Element
+ Share options + Annual bonus subject to individual and company performance
An open network for secure, decentralised communication
Be an early applicant
An open network for secure, decentralised communication
101-200 employees
Be an early applicant
+ Share options + Annual bonus subject to individual and company performance
101-200 employees
Company mission
To make communication better for everyone.
Role
Who you are
- Strong grasp of core security principles and common vulnerability classes (across infrastructure, cloud and applications)
- Strong knowledge of network and cloud security, particularly AWS
- Demonstrable offensive security experience (pentest, bug bounty, or research). Tooling fluency in common pentesting tools (nmap, nuclei, mitmproxy, Burp, ffuf, etc); bonus points for the ability to script your own
- Proficiency in at least one of Python, Rust, TypeScript, or Go
- Experience working with software teams to help them embed security practices into their workflows
- Comfortable working in a remote-first organisation
- Based in Europe (including UK)
Desirable
- Results of prior security research (write-ups, CVEs, exploits). We prefer demonstrated results over certificates
- Familiarity with the Matrix protocol and/or cryptography
- Customer-facing security docs or advisory experience
- Participation in CTF competitions and similar security challenges
- Knowledge of secure data handling, especially in the context of GDPR
- Prior experience with achieving security certifications, ideally ISO 27001
- Open-source security contributions. We are an open source company, an intuitive understanding of what it is to contribute to FOSS projects will be beneficial
What the job involves
- The Element Security Team raises security standards across Element and the wider Matrix ecosystem
- We have a dual role: owning and delivering projects that materially improve infrastructure, products, and the Matrix protocol, while also acting as advisors and consultants to other teams to ensure security is built in everywhere
- The team also serves as the Matrix.org Foundation Security Team with roughly a 50/50 split across activities
- Reporting to the Head of Security, we operate with wide scope and high impact
- We are a small, pragmatic group that biases to action and values ownership over titles
- Contribute to the continuous penetration testing programme for Element and Matrix.org infrastructure
- Own vulnerability management: triage, prioritisation, and remediation guidance
- Embed security into CI/CD and infrastructure-as-code workflows
- Partner with engineering teams to raise security awareness and embed best practices
- Conduct security research to identify novel vulnerabilities in infrastructure and code
- Triage external vulnerability reports and coordinate responses/advisories
- Deliver customer-facing security features (e.g. SBOMs, advisories)
- Review and support secure development in Python, Rust, TypeScript and Go
- Support Compliance by implementing and evidencing security controls
- Contribute to protocol analysis and development with Matrix.org Foundation staff
Our take
Element emerged from the creators of Matrix with the goal of nurturing and financing the Matrix ecosystem, which established a groundbreaking standard for open-source decentralised communication.
Recognising the significance of instant messaging for productivity, especially exemplified by platforms like SDlck and WhatsApp, Matrix and Element identified an unmet need for secure network-based services. This approach allows companies to retain complete control over their data, distinguishing Element in the market.
Financial backing will be put towards expanding its technology and enhancing its peer-to-peer architecture. The ultimate aim is to eliminate the necessity for servers, with a specific focus on refining Element's decentralised voice and videoconferencing services. This allocation of resources positions Element to not only meet current market demands but also to pioneer innovative solutions in secure communication technology.
Steph
Company Specialist at Welcome to the Jungle
Insights
3% employee growth in 12 months
Company
Company HQ
Chiswick, London, UK
Leadership
Amandine Le Pape
(COO)Co-founder of Matrix.org. They previously worked in Project Manager roles at Amdocs for over 11 years.
Mattew Hodgson
(CEO/CTO)Co-founder of Matrix.org. They also have 14 years of experience as a Software Developer and Product Manager at MX Telecom and OpenMarket. As well as 5 Years experience as a Director of Communications at Amdocs.
Share this job
View 1 more job at Element