Security Engineer

Mysten Labs

Security Engineer responsible for operational and software security at Mysten Labs. Maintaining custody systems and enhancing security protocols for the Sui blockchain and ecosystem.

Posted 5/14/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $140,000 - $190,000 per yearWebsite

Tech Stack

Tools & technologies

CloudPythonRustTypeScriptWeb3

About the role

Key responsibilities & impact

Maintain and improve the custody systems that hold validator keys, operational keys, and important objects for Mysten-run smart contracts and general on-chain operations, including key generation, storage, access controls, signing workflows, aggregation, rotation, and recovery procedures
Harden the signing path end-to-end: review and improve the code, infrastructure, and operational practices around how transactions are authorized, reviewed, and submitted on-chain
Build and improve anti-scam and anti-abuse tooling for the Sui ecosystem, detecting phishing sites, malicious dApps, drainer contracts, and other threats that target Sui users, and partnering with wallet ecosystem teams on mitigations.
Conduct code and design reviews of components that interact with sensitive keys or handle on-chain assets, with a focus on cryptographic correctness, access control, and operational safety
Participate in investigation and response for security issues and incidents that touch custody or ecosystem abuse, and drive concrete fixes that prevent the same class of issue from recurring

Requirements

What you’ll need

3+ years of hands-on experience in security engineering, application security, or product security.
Knowledge relevant to key management in production, for example HSMs, cloud KMS, MPC or threshold-signature systems, hardware wallets, or comparable custody infrastructure.
Proficiency in one or more of: Rust, TypeScript, Python, or Move, and experience reviewing and writing security-sensitive code.
Solid understanding of applied cryptography fundamentals and the common ways cryptographic systems are misused in practice.
A builder mentality: comfortable operating with ambiguity, diving into unfamiliar codebases, and shipping the fix yourself rather than handing it off.
Strong written and verbal communication: you can explain a finding or an issue clearly to the engineer who needs to fix it and to a non-technical stakeholder who needs to understand the risk.
Interest in the web3 space is required; prior experience shipping in crypto, fintech, or other regulated/high-stakes environments is a plus.

Benefits

Comp & perks

Comprehensive health insurance including medical, dental, and vision covered for you and your dependents; including Tax Savings Benefits such as HSAs and FSAs.
18 weeks of paid Parental Leave
Complimentary access to wellbeing programs, such as family planning support, gender affirming care, and hormone replacement therapy as well as physical fitness/nutrition apps. We also provide mental health support and counseling and EAP (Employee Assistance Program) for financial/legal assistance, home life referrals, and more
Short Term and Long Term Disability coverage as well as Life Insurance and Accident Insurance, and other coverage options.
Traveler Insurance
401(k)
Complimentary privacy protection service
Wellness stipend
Flexible paid time off and 11 paid holidays per year
Team offsites and annual all-company retreat

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security engineeringapplication securityproduct securitykey managementHSMscloud KMSMPCRustTypeScriptPython

Soft Skills

strong written communicationstrong verbal communicationbuilder mentalityproblem-solvingoperating with ambiguity