Security Engineer
New
M
Mysten LabsBlockchain security
Location: USA (Remote)
Secondary Locations: Canada (Remote)Full-TimeMiddle
Salary140,000 - 190,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 3+ years of hands-on experience in security engineering, application security or product security
- Required Skills
- PythonTypeScriptRust
Requirements
- Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
- 3+ years of hands-on experience in security engineering, application security, or product security.
- A track record of finding real vulnerabilities, such as bug bounty reports, audit findings, CVEs, or published research.
- Strong Web2 security fundamentals, including XSS, CSRF, SSRF, authorization flaws, injection, deserialization, software supply chain failures, and cryptographic failures.
- Proficiency in one or more of Rust, TypeScript, Python, or Move.
- Experience reviewing and writing security-sensitive code.
- Hands-on knowledge of software supply chain attack surfaces, including npm, crates.io, PyPI, CI/CD risks, and build provenance.
- Solid understanding of applied cryptography fundamentals and common ways cryptographic systems are misused.
- Experience on either side of a bug bounty program or an audit engagement.
- Interest in the web3 space.
Responsibilities
- Run bug bounty programs, including triage, severity assessment, responses, escalations, fix validation, budgets, and payouts.
- Scope and schedule external audits, serve as the technical counterpart, and track findings through remediation and fix validation.
- Conduct code and design reviews of systems built by Mysten, its subsidiaries, and partners, and drive issues through investigation, incident response, and remediation.
- Own software supply chain security, including dependency and CI/CD defenses, code security controls, self-auditing, and package and build pipeline incident response.
- Build anti-scam and anti-abuse tooling for the Sui ecosystem and work with wallet teams on mitigations.
- Build security tooling for LLM-driven triage and review, static and dynamic analysis, and CI and code review workflows.
View Full Description & ApplyYou'll be redirected to the employer's site
