Senior Security Engineer
New
M
Mysten LabsBlockchain security
USA (Remote)Full-TimeSenior
Salary165,000 - 225,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus
- Required Skills
- AWSPythonSQLGCPKubernetes
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
- 5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus.
- Hands-on incident response experience on endpoints and in the cloud.
- Experience operating EDR and writing and tuning detections.
- Knowledge of macOS and Linux internals, including persistence, credential theft, process injection, and living-off-the-land binaries.
- Experience building or operating telemetry pipelines and a SIEM or security data lake at TB scale.
- Strong SQL skills, including writing detection logic over large datasets.
- Production engineering experience with Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring, and alerting.
- Proficiency in Python or Go, and comfort with Rust or willingness to work in it.
- Working knowledge of SSO (OIDC/SAML), phishing-resistant MFA, device trust, and session and token theft.
- Strong written communication skills, including the ability to run an incident channel and write a post-mortem.
- Interest in the web3 space is required.
Responsibilities
- Build and operate the Security Observability & Data Platform, including ingestion, normalization, retention, query, and detection layers.
- Develop, test, review, and measure detections for precision.
- Own endpoint security across the fleet, including EDR deployment and response, binary authorization, and hardening baselines.
- Lead threat hunting, internal investigations, and insider-threat work.
- Handle security incidents end to end, including triage, containment, forensics, root cause analysis, and preventive controls.
- Build and operate security services, including zero-trust AuthN/AuthZ, a blocking service, an application proxy, asset inventory, a developer portal, and compliance as code.
- Build and run local and Kubernetes agent platforms, using LLM agents to automate security triage, enrichment, investigation, and response.
- Review Kubernetes, AWS/GCP, bare-metal, and CI-runner designs for security and help engineering teams adopt shared services.
- Run red-team and adversary-emulation exercises and turn findings into detections and fixes.
- Write runbooks and post-mortems.
View Full Description & ApplyYou'll be redirected to the employer's site
