Senior Security Engineer

The role

This person will build and operate a Security Observability & Data Platform and own endpoint security across the fleet. They will lead threat hunting, internal investigations, and build security services like zero-trust AuthN/AuthZ and an agent platform.

What you will do

• Build and operate the Security Observability & Data Platform
• Own endpoint security across the fleet
• Lead threat hunting, internal investigations and insider-threat work
• Handle security incidents end to end
• Build the next generation of security services
• Build and run the agent platform
• Review infrastructure and cloud designs for security
• Run red-team and adversary-emulation exercises
• Write runbooks and post-mortems

Required qualifications

• Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience
• 5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus, including hands-on incident response on endpoints and in the cloud
• Experience operating an EDR, writing and tuning detections
• Knowledge of macOS and Linux internals
• Experience building or operating telemetry pipelines and a SIEM or security data lake at TB scale
• Strong SQL, including detection logic over large datasets
• Hands-on production engineering: Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring and alerting
• Proficiency in Python or Go, and comfort with Rust or willingness to work in it
• Working knowledge of identity: SSO (OIDC/SAML), phishing-resistant MFA, device trust, and how session and token theft work
• Strong written communication
• Interest in the web3 space is required

Nice to have

• Experience building zero-trust access, identity-aware proxies or policy engines
• Binary authorization or allowlisting at fleet scale
• Familiarity with the threat actors that target crypto companies and their methods
• Digital forensics (memory, disk, macOS unified logs) and malware analysis
• Experience building security tooling with LLM agents
• Compliance as code (CIS benchmarks); experience in ISO 27001 or SOC 2 environments
• Publications, conference talks or open-source security tooling

Before you apply

• Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant informa
• We may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates

About the company

Mysten Labs builds foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Their work spans on-chain finance and the emerging agent economy through Sui, Move, and their broader technology stack.