Senior Security Engineer - Zero-Trust & Threat Hunting

Mysten Labs, Inc.; United States; Remote; USD 165,000 - 225,000; Full time

Job summary

Mysten Labs, Inc. is hiring for a Security Engineer to build and operate a TB-scale Security Observability & Data Platform.

You will own endpoint security with EDR, lead threat hunting, and run adversary-emulation exercises while developing next-gen security services and an agent platform using LLM automation. The role requires strong experience in security engineering, incident response, telemetry pipelines, and proficiency in Python/Go with Rust exposure.

Qualifications

• 5+ years in security engineering or related field.
• Hands-on incident response on endpoints and in the cloud.
• Experience operating an EDR and tuning detections.
• Strong SQL for detection logic over large datasets.

Responsibilities

• Build and operate the Security Observability & Data Platform (TB-scale).
• Own endpoint security across the fleet with EDR and hardening baselines.
• Lead threat hunting, investigations and insider-threat work.
• Build next-gen security services: zero-trust AuthN/AuthZ, blocking service, app proxy, asset inventory, compliance as code.
• Build/run the agent platform (local and Kubernetes) with LLM agents for triage and response.
• Review infrastructure and cloud designs for security and promote shared services.
• Run red-team and adversary-emulation exercises; produce detections and fixes.
• Write runbooks and post-mortems that are clear at 3 a.m.

Skills

Security engineering

Detection and response

Incident response

Telemetry pipelines

SQL

Python

Go

Rust

Kubernetes

Cloud (AWS/GCP)

SRE

Identity & MFA

Education

Bachelor's degree in CS/engineering or equivalent

Tools

EDR

SIEM

Security data lake

Job description

Mysten Labs, Inc. is hiring for a Security Engineer to build and operate a TB-scale Security Observability & Data Platform.

You will own endpoint security with EDR, lead threat hunting, and run adversary-emulation exercises while developing next-gen security services and an agent platform using LLM automation. The role requires strong experience in security engineering, incident response, telemetry pipelines, and proficiency in Python/Go with Rust exposure.