Senior Security Engineer
at Mystenlabs
USA (Remote), remote, senior, full time, USD 1,65,000–2,25,000 / year, 5+ years
posted 21 Oct 2026
- Infrastructure as Code
- Rust
- Go
- MFA
- SAML
- LLM
- SQL
- SOC 2
- EDR
- Linux
- GCP
- ISO 27001
- OIDC
- AWS
- macOS
- Kubernetes
- Python
About the role
Remote: yes Posted: 2026-10-21
Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value.
Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact.
What you would do
- Build and operate the Security Observability & Data Platform (tens of TB/month and growing). This covers ingestion, normalization and retention, plus the query and detection layer on top. Detections are code: tested, reviewed, and measured for precision.
- Own endpoint security across the fleet: deploy, tune and respond with EDR; run and configure binary authorization; and set hardening baselines with IT Operations.
- Lead threat hunting, internal investigations and insider-threat work. Handle security incidents end to end: triage, containment, forensics, root cause, and the control that prevents a repeat.
- Build the next generation of security services and run them in production: zero-trust AuthN/AuthZ, a uniform blocking service, an application proxy, asset inventory, developer portal, and compliance as code.
- Build and run the agent platform (local and Kubernetes). Use LLM agents to automate triage, enrichment, investigation and response, with deterministic checks wherever a model's answer isn't enough.
- Review infrastructure and cloud designs (Kubernetes, AWS/GCP, bare metal, CI runners) for security, and help engineering teams adopt the shared services instead of building their own.
- Run red-team and adversary-emulation exercises, and turn the results into detections and fixes.
- Write runbooks and post-mortems that someone who wasn't in the room can follow at 3 a.m.
What they are looking for
- Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
Read from jobs.ashbyhq.com, last seen 3d ago.