Senior Security Engineer
Join Mysten Labs as a Senior Security Engineer to build and operate security observability platforms in a remote-first environment.
Posted by employer 1 day ago
First seen on Joblaze 2 hours ago
Last verified on the company career page 2 hours ago
Skills & Technologies
What you'll build
- Build and operate the Security Observability & Data Platform
- Own endpoint security across the fleet
- Lead threat hunting and internal investigations
- Build the next generation of security services
- Run red-team and adversary-emulation exercises
Must have
- Bachelor's degree in Computer Science or equivalent
- 5+ years in security engineering or infrastructure/SRE with a security focus
- Experience operating an EDR and writing detections
- Hands-on production engineering: Linux, containers, Kubernetes
- Proficiency in Python or Go
Nice to have
- Experience building zero-trust access
- Familiarity with threat actors targeting crypto companies
- Digital forensics and malware analysis
- Experience building security tooling with LLM agents
- Compliance as code experience
AI in the day-to-day
Use LLM agents to automate triage, enrichment, investigation and response.
Requirements
- Experience
- 5+ years
- Education
- Bachelor's degree
Not disclosed in this posting: compensation, visa sponsorship.
Joblaze summary
The Senior Security Engineer at Mysten Labs is responsible for developing and managing the Security Observability & Data Platform, ensuring robust endpoint security, and leading threat detection and incident response efforts. Key skills include experience with EDR systems, cloud security, and proficiency in programming languages like Python or Go, with a focus on security in large-scale environments. This role is suited for seasoned professionals with a strong background in security engineering and a keen interest in the web3 landscape.
Joblaze insights
Quick facts
- Is the Senior Security Engineer role remote?
- Yes — Mysten Labs lists this as a fully remote position.
- How much experience is required?
- At least 5 years of relevant experience for this Senior Security Engineer role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AWS, EDR, GCP, Go, Kubernetes, Linux.
- What seniority level is this role?
- Mysten Labs targets senior candidates for this position.
- Is this full-time or contract?
- Full-time for this Senior Security Engineer role at Mysten Labs.
From the original posting
Responsibilities
Build and operate the Security Observability & Data Platform (tens of TB/month and growing). This covers ingestion, normalization and retention, plus the query and detection layer on top. Detections are code: tested, reviewed, and measured for precision.
Own endpoint security across the fleet: deploy, tune and respond with EDR; run and configure binary authorization; and set hardening baselines with IT Operations.
Lead threat hunting, internal investigations and insider-threat work. Handle security incidents end to end: triage, containment, forensics, root cause, and the control that prevents a repeat.
Build the next generation of security services and run them in production: zero-trust AuthN/AuthZ, a uniform blocking service, an application proxy, asset inventory, developer portal, and compliance as code.
Build and run the agent platform (local and Kubernetes). Use LLM agents to automate triage, enrichment, investigation and response, with deterministic checks wherever a model's answer isn't enough.
Review infrastructure and cloud designs (Kubernetes, AWS/GCP, bare metal, CI runners) for security, and help engineering teams adopt the shared services instead of building their own.
Run red-team and adversary-emulation exercises, and turn the results into detections and fixes.
Write runbooks and post-mortems that someone who wasn't in the room can follow at 3 a.m.
Minimum Qualifications
Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus, including hands-on incident response on endpoints and in the cloud.
Experience operating an EDR, writing and tuning detections. Knowledge of macOS and Linux internals as attackers use them: persistence, credential theft, process injection, living-off-the-land binaries.
Experience building or operating telemetry pipelines and a SIEM or security data lake at TB scale. Strong SQL, including detection logic over large datasets.
Hands-on production engineering: Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring and alerting.
Proficiency in Python or Go, and comfort with Rust or willingness to work in it (most of Mysten's stack are Rust).
Working knowledge of identity: SSO (OIDC/SAML), phishing-resistant MFA, device trust, and how session and token theft work.
Strong written communication: can run an incident channel and write the post-mortem.
Interest in the web3 space is required.
Preferred Qualifications
Experience building zero-trust access, identity-aware proxies or policy engines.
Binary authorization or allowlisting at fleet scale
Familiarity with the threat actors that target crypto companies and their methods, from social engineering and fake campaigns to supply chain compromises.
Digital forensics (memory, disk, macOS unified logs) and malware analysis.
Experience building security tooling with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling has to do the work.
Compliance as code (CIS benchmarks); experience in ISO 27001 or SOC 2 environments.
Publications, conference talks or open-source security tooling.
Standard company text repeated across Mysten Labs's postings is omitted here.