Mysten Labs

Mysten Labs

Senior Security Engineer

USA (Remote) · Senior · Contract

Sponsorship not specifiedDetected 2 days ago
PythonGoSQLAWSGCPKubernetesLinuxSite Reliability EngineeringLLMsAgentic AICybersecuritySIEMDetection EngineeringIncident ResponseComplianceSupply ChainEmbedded SystemsZero TrustCommunication

Stay score

odds of building a lasting career here

37Risky
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

2 transfer filings in the last year, covering 2 workers. Median labor-condition decision: 8 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Our work spans on-chain finance and the emerging agent economy.
  • Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information.

Responsibilities

  • Own endpoint security across the fleet: deploy, tune and respond with EDR
  • Lead threat hunting, internal investigations and insider-threat work. Handle security incidents end to end: triage, containment, forensics, root cause, and the control that prevents a repeat.
  • Build the next generation of security services and run them in production: zero-trust AuthN/AuthZ, a uniform blocking service, an application proxy, asset inventory, developer portal, and compliance as code.
  • Build and run the agent platform (local and Kubernetes). Use LLM agents to automate triage, enrichment, investigation and response, with deterministic checks wherever a model's answer isn't enough.
  • Review infrastructure and cloud designs (Kubernetes, AWS/GCP, bare metal, CI runners) for security, and help engineering teams adopt the shared services instead of building their own.
  • Build and operate the Security Observability & Data Platform (tens of TB/month and growing).
  • Own endpoint security across the fleet: deploy, tune and respond with EDR; run and configure binary authorization; and set hardening baselines with IT Operations.
  • We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value.
  • Through Sui, Move, and our broader technology stack, we're building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact.
  • Lead threat hunting, internal investigations and insider-threat work.

Requirements

  • Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
  • 5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus, including hands-on incident response on endpoints and in the cloud.
  • Experience operating an EDR, writing and tuning detections.
  • Knowledge of macOS and Linux internals as attackers use them: persistence, credential theft, process injection, living-off-the-land binaries.
  • Proficiency in Python or Go, and comfort with Rust or willingness to work in it (most of Mysten's stack are Rust).
  • Working knowledge of identity: SSO (OIDC/SAML), phishing-resistant MFA, device trust, and how session and token theft work.
  • Interest in the web3 space is required.

Nice to have

  • Binary authorization or allowlisting at fleet scale
  • Familiarity with the threat actors that target crypto companies and their methods, from social engineering and fake campaigns to supply chain compromises.
  • Digital forensics (memory, disk, macOS unified logs) and malware analysis.
  • Compliance as code (CIS benchmarks)
  • experience in ISO 27001 or SOC 2 environments.
  • Publications, conference talks or open-source security tooling.
  • Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers.
  • All hiring decisions are ultimately made by human reviewers.

Company info

  • Our team is remote first and we are hiring across the world.
  • Mysten Labs' mission is to advance the internet through step-function improvements in what technology makes possible.
Apply directly at Mysten Labs →Create a free account for alerts like thisView Mysten Labs immigration profile

This listing is sourced directly from Mysten Labs's careers page and normalized into a canonical job model.