Remote Senior Security Engineer — Build Zero-Trust & SIEM

VulnU; United States; Remote; USD 165,000 - 225,000; Full time

Job summary

Mysten Labs is seeking a Senior Security Engineer to build and operate the Security Observability & Data Platform, own endpoint security, and lead threat hunting and incident response. You will develop and run security services, including AppProxy and zero-trust components, across cloud and on-prem environments.

You will review infrastructure security, lead red-team exercises, implement detections, and author runbooks/post-mortems to ensure rapid containment and learning.

Qualifications

• 5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus.
• Experience operating an EDR, writing and tuning detections.
• Knowledge of macOS and Linux internals as attackers use them: persistence, credential theft, process injection.

Responsibilities

• Build and operate the Security Observability & Data Platform (tens of TB/month and growing).
• Own endpoint security across the fleet: deploy, tune and respond with EDR; run and configure binary authorization; and set hardening baselines with IT Operations.
• Lead threat hunting, internal investigations and insider-threat work; manage incidents end to end: triage, containment, forensics, root cause, and prevention controls.
• Build next-gen security services and run them in production: zero-trust AuthN/AuthZ, uniform blocking service, application proxy, asset inventory, and compliance as code.
• Build and run the agent platform (local and Kubernetes); use LLM agents to automate triage and response with deterministic checks where needed.
• Review infrastructure and cloud designs (Kubernetes, AWS/GCP) for security and promote shared services over bespoke solutions.
• Run red-team and adversary-emulation exercises; translate results into detections and fixes.
• Write runbooks and post-mortems that are clear for anyone to follow at 3 a.m.

Skills

Security engineering

Incident response

Threat hunting

Python

Go

Rust

Linux

Cloud (AWS/GCP)

SRE practices

DevOps

Education

Bachelor's degree in Computer Science, Computer Engineering, or related field

Tools

EDR

Telemetry pipelines

SIEM

Kubernetes

Rust tooling

CI/CD

Terraform

Job description

Mysten Labs is seeking a Senior Security Engineer to build and operate the Security Observability & Data Platform, own endpoint security, and lead threat hunting and incident response. You will develop and run security services, including AppProxy and zero-trust components, across cloud and on-prem environments.

You will review infrastructure security, lead red-team exercises, implement detections, and author runbooks/post-mortems to ensure rapid containment and learning.