Senior Security Engineer

Career Tools

About This Role

Mysten Labs operates as a developer of core infrastructure and products designed to advance the internet through advancements in technology, focusing on on-chain finance and the agent economy with offerings like Sui and the Move programming language. The company is seeking a Senior Security Engineer to join its remote-first global team. In this position, the professional will build and manage the Security Observability and Data Platform, oversee fleet-wide endpoint security,…

Job Description

Responsibilities

• Build and maintain the Security Observability and Data Platform handling tens of terabytes monthly, encompassing data ingestion, normalization, retention, querying, and detection layers
• Manage endpoint security across all machines by deploying and tuning EDR tools, running binary authorization, and establishing hardening baselines alongside IT Operations
• Drive threat hunting activities, internal investigations, and insider-threat prevention measures
• Manage full lifecycle security incidents including triage, containment, forensics, root cause analysis, and preventive controls
• Develop and operate production security services such as zero-trust authentication and authorization, an application proxy, a uniform blocking service, asset inventory, compliance as code, and a developer portal
• Build and operate local and Kubernetes-based agent platforms utilizing LLM agents for triage, enrichment, investigation, and response alongside deterministic validation checks
• Review cloud and infrastructure architectures across Kubernetes, AWS, GCP, bare metal, and CI runners for security compliance
• Execute red-team and adversary-emulation tests and translate outcomes into operational detections and system fixes
• Produce detailed operational runbooks and post-mortems for incidents

Requirements

• Bachelor’s degree in Computer Engineering, Computer Science, a related technical field, or equivalent practical experience
• At least 5 years of professional experience in security engineering, infrastructure/SRE with a security emphasis, or detection and response, featuring hands-on cloud and endpoint incident handling
• Proven background operating an EDR solution while writing and refining detection rules
• Familiarity with Linux and macOS internal attack vectors such as credential theft, process injection, persistence mechanisms, and living-off-the-land binaries
• Demonstrated capability in operating or constructing telemetry pipelines and a SIEM or security data lake at terabyte scale
• Strong SQL proficiency for creating detection logic over large volumes of data
• Practical production engineering expertise spanning Linux, containers, Kubernetes, Infrastructure as Code, monitoring and alerting, and at least one primary public cloud
• Fluency in Python or Go, with comfort using Rust or a willingness to learn it
• Practical knowledge of identity systems including SSO with OIDC and SAML, phishing-resistant MFA, device trust, and token or session theft mechanics
• Strong written communication skills for managing incident channels and authoring post-mortems
• Demonstrated interest in the web3 sector

Qualifications

• Experience developing zero-trust access solutions, identity-aware proxies, or policy engines
• Fleet-scale binary authorization or allowlisting experience
• Knowledge of threat actor groups targeting crypto organizations, including social engineering, fake campaigns, and supply chain attacks
• Expertise in digital forensics covering memory, disk, and macOS unified logs, alongside malware analysis
• Background in building security tooling backed by LLM agents
• Experience implementing compliance as code using CIS benchmarks within ISO 27001 or SOC 2 environments
• Published research, conference speaking engagements, or open-source security tooling contributions

Core Skills

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.