165K–225K USD / year
Senior Security Engineer
DevOpsRemote — USA
Published on 2026-10-21
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and operate Mysten Labs’ security platform, covering telemetry, endpoint protection, threat detection, and incident response. Develop production security services and use automation, including LLM agents, to improve investigation and response.
About the company
Mysten Labs is a technology company specializing in blockchain and decentralized finance solutions. They focus on developing infrastructure and products that enhance the interoperability and efficiency of digital assets for developers and enterprises.
The team
Security
Stack
PythonGoRustLinuxmacOSKubernetesAWSGCP
What you'll do
- Build and operate security telemetry pipelines, data storage, queries, and detections at TB scale.
- Manage endpoint security, EDR, binary authorization, and fleet hardening.
- Lead threat hunting, internal investigations, and incident response from triage through remediation.
- Build and operate zero-trust access, blocking, proxy, asset inventory, developer portal, and compliance services.
- Develop security agents and automation for triage, enrichment, investigation, and response.
- Review cloud, Kubernetes, bare-metal, and CI infrastructure designs for security.
- Run red-team and adversary-emulation exercises and turn findings into detections and fixes.
- Write incident runbooks and post-mortems.
What we're looking for
- 5+ years in security engineering, detection and response, or security-focused infrastructure/SRE.
- Hands-on endpoint and cloud incident response, EDR operations, and detection writing.
- Experience with TB-scale telemetry pipelines or SIEM/security data lakes and strong SQL.
- Production experience with Linux, containers, Kubernetes, a major cloud provider, infrastructure as code, monitoring, and alerting.
- Proficiency in Python or Go and willingness to work with Rust.
- Working knowledge of SSO, phishing-resistant MFA, device trust, and session or token theft.
- Strong written communication and incident coordination skills.
- Interest in web3 is required.
Nice to have
- Experience with zero-trust access, identity-aware proxies, or policy engines.
- Fleet-scale binary authorization or allowlisting experience.
- Knowledge of threats targeting crypto companies.
- Digital forensics or malware analysis experience.
- Experience building security tools with LLM agents.
- Compliance-as-code, CIS benchmarks, ISO 27001, or SOC 2 experience.
- Security publications, conference talks, or open-source tooling.
Benefits
- Token and equity compensation, with eligibility for annual refresh grants.
- Medical, dental, and vision insurance for employees and dependents.
- 18 weeks of paid parental leave.
- Flexible paid time off and 11 paid holidays.
- 401(k), wellness stipend, and team offsites.