Senior Security Engineer, DeFi

The role

You will protect the Sui ecosystem by uncovering vulnerabilities, building monitoring tools, and assessing economic risk across DeFi protocols. You will work with external protocol teams and Mysten's DeFi products to address risks and strengthen security.

What you will do

• Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk
• Extend security team tooling including static analysis and proprietary agent skills
• Measure and drive compliance with DeFi security recommendations across supported protocols
• Hunt for critical vulnerabilities in high-TVL Sui protocols
• Act as security team point of contact for external DeFi teams and Mysten products
• Write findings, reports, and runbooks

Required qualifications

• Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience
• 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering
• Track record of building tools that ran in production and of finding real vulnerabilities
• Strong understanding of DeFi mechanics and their failure modes
• Proficiency in TypeScript and Python
• Comfort with Rust
• Ability to write SQL over large datasets
• Ability to work with blockchain indexers and data warehouses
• Experience reading smart contract code at source or the bytecode or disassembly level, or evident ability to learn it quickly
• Strong written and verbal communication
• Interest in the web3 space is required

Nice to have

• Sui and Move experience
• Knowledge of the recent DeFi exploit history on Sui and other chains
• Experience building analysis or monitoring tools with LLM agents
• Static or dynamic program analysis experience
• Quantitative or economic modeling experience
• Publications, conference talks, CVEs, or bug bounty rankings

About the company

Mysten Labs builds foundational infrastructure and products to advance the internet through improvements in technology. Their work spans on-chain finance and the emerging agent economy through Sui, Move, and their broader technology stack.