{bc}
Apply
ashby

Security Engineer

Mysten Labs
Remote, USA
Full-time
Mid · 3+ years experience
Remote
USD 140000-190000 yearly / year
Discovered 2 weeks ago
RustTypeScriptPythonMoveGitHubCodeQL

Full Job Posting

Minimum Qualifications

  • Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
  • 3+ years of hands-on experience in security engineering, application security or product security, with a track record of finding real vulnerabilities (bug bounty reports, audit findings, CVEs or published research).
  • Strong Web2 security fundamentals: XSS, CSRF, SSRF, authorization flaws, injection, deserialization, software supply chain failures, cryptographic failures.
  • Proficiency in one or more of Rust, TypeScript, Python or Move, and experience reviewing and writing security-sensitive code.
  • Hands-on knowledge of software supply chain attack surface: package ecosystems (npm, crates.io , PyPI), CI/CD (GitHub Actions workflow injection, token exposure, unpinned actions), and build provenance.
  • Solid understanding of applied cryptography fundamentals and the common ways cryptographic systems are misused in practice.
  • Experience on either side of a bug bounty program or an audit engagement.
  • Strong written and verbal communication, including the ability to influence teams you have no formal authority over.
  • Interest in the web3 space is required.

Preferred Qualifications

  • Smart contract or wallet security: Move, Solidity or Rust-based chains; Sui's object and capability model is a plus.
  • Static or dynamic program analysis: CodeQL, Semgrep, taint analysis, fuzzing, symbolic execution.
  • Experience building security tooling with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling has to do the work.
  • Anti-phishing, anti-fraud or trust & safety experience: domain and content monitoring, crawling, classifiers, threat intelligence.
  • Knowledge of recent crypto incidents and the defect classes behind them: drainer kits, DeFi frontend compromises, package-registry compromises.
  • Notable bug bounty rankings, CVEs, publications or conference talks.
  • Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information.
  • Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @ mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers ). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers .
  • To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers.
  • Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Mysten Labs

Senior Security Engineer

, USA

Discovered 2 weeks agoFull-time

Enterprise Sales Lead, AI

, USA

Discovered 2 weeks agoFull-time

Software Engineer, Partner Solutions (Greece)

Athens, USA

Discovered 1 months agoFull-time

Senior Security Engineer, DeFi

, USA

Discovered 1 months agoFull-time

Engineering Manager, Wallet

, CAN

Discovered 1 months agoFull-time

Staff Product Designer, DeFi

, USA

Discovered 1 months agoFull-time

Engineering Manager, Wallet

, USA

Discovered 1 months agoFull-time