Security Engineer jobs in United States
Explore 1,325 matching jobs.
Security Engineer
Mysten Labs
Posted: 10/20/2026PythonRustTypeScriptWeb3
Information Systems Security Officer II
General Dynamics Information Technology
Posted: 10/20/2026Cyber SecurityTypeScript
Security Engineer
Ceresti Health
Posted: 10/20/2026AWSCloudDockerPythonGo
Lead Application Security Architect
FINRA
Posted: 10/20/2026Cyber SecurityMicroservices
J
Security Control Assessor, Liaison
JMA Resources
Posted: 10/20/2026Cyber SecuritySplunk
Security Engineer
Upwind Security
Posted: 10/20/2026AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesLinuxPython
Lead Security Technician
Facility Solutions Group
Posted: 10/20/2026Staff Enterprise Security Engineer
Strava
Posted: 10/20/2026JamfLinuxMacOSPython
Security Engineer – DLP, Insider Threat
Empower
Posted: 10/20/2026AWSCloudCyber SecurityLinuxPythonSplunk
Technology Director – Cybersecurity Engineering
Wells Fargo
Posted: 10/20/2026CloudCyber SecurityMicroservicesPythonPyTorchSparkTensorflow
Security Research Manager
Bitsight
Posted: 10/20/2026Security – Information Technology Manager
Leidos
Posted: 10/20/2026AWSCyber Security
Information Security Advisor
Elevance Health
Posted: 10/20/2026AWSAzureCloudGoogle Cloud PlatformKubernetesServiceNowSplunkTerraformVault
Cloud & AI Security Architect
Elevance Health
Posted: 10/20/2026AWSAzureCloudGoogle Cloud PlatformOracle
Security Research Manager
Bitsight
Posted: 10/20/2026Manager, Global Security – Emergency Preparedness
Avantor
Posted: 10/20/2026AEM
Security Assurance Engineer
Chainlink Labs
Posted: 10/20/2026AWSCloudJamfPythonSplunkWeb3
Senior Navigation Engineer, Top Secret Security Clearance Required
BLUE ORIGIN
Posted: 10/20/2026PythonC++
Lead Security Technician
Facility Solutions Group
Posted: 10/20/2026Security and Vulnerability Management Engineer
Peraton
Posted: 10/20/2026AWSAzureCloudCyber SecurityDNSJamfLinuxMacOSMS SQL Server+3 more

Security Engineer
Mysten LabsPosted 10/20/2026full-timeRemote • United States, CanadaMid-LevelSenior💰 $140,000 - $190,000 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security engineering with a focus on application security, vulnerability assessment, and software supply chain security. Proficient in Rust, TypeScript, and Move, with strong communication skills to influence cross-functional teams.
Highest-signal resume keywords
Security EngineeringApplication SecurityBug Bounty Program ManagementRust ProficiencySoftware Supply Chain Security
Tech Stack
Tools & technologiesPythonRustTypeScriptWeb3
About the role
Key responsibilities & impact- Run Mysten's bug bounty programs, including triage, severity assessment, responses, internal escalations, fix validation, budget, and payouts
- Turn recurring bug bounty report classes into automated checks
- Own audit engagements by scoping and scheduling external audits, serving as technical counterpart, and tracking findings through remediation and fix validation
- Conduct code and design reviews of systems built by Mysten, subsidiaries, and partners using Rust, TypeScript, and Move
- Drive security issues to conclusion, including investigation and incident response
- Run variant analysis to close each bug class wherever it occurs
- Own software supply chain security, including dependency and CI/CD malware defenses, Endor Labs, GitHub controls, merge bots, and code security self-auditing
- Detect and respond to compromised packages, maintainers, and build pipelines
- Secure provenance and signing of shipped software
- Build and improve anti-scam and anti-abuse tooling for the Sui ecosystem
- Detect phishing sites, malicious dApps, drainer contracts, and other threats targeting Sui users
- Work with wallet teams on mitigations
- Build security tooling including LLM-driven triage and review agents, static and dynamic analysis, taint analysis, call graphs, and fuzzing integrated into CI and code review
- Build known-clean checks to improve trust in security tooling
Requirements
What you’ll need- Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience
- 3+ years of hands-on experience in security engineering, application security, or product security
- Track record of finding real vulnerabilities, such as bug bounty reports, audit findings, CVEs, or published research
- Strong Web2 security fundamentals, including XSS, CSRF, SSRF, authorization flaws, injection, deserialization, software supply chain failures, and cryptographic failures
- Proficiency in one or more of Rust, TypeScript, Python, or Move
- Experience reviewing and writing security-sensitive code
- Hands-on knowledge of software supply chain attack surfaces, including npm, crates.io, PyPI, GitHub Actions workflow injection, token exposure, unpinned actions, and build provenance
- Solid understanding of applied cryptography fundamentals and common cryptographic misuse
- Experience on either side of a bug bounty program or audit engagement
- Strong written and verbal communication and ability to influence teams without formal authority
- Interest in the web3 space is required
- Employment contingent upon successful background check, potentially including employment history, education credentials, and criminal history verification
Benefits
Comp & perks- Tokens + equity compensation
- Benefits
- Eligibility to participate in annual equity and token refresh grant programs
- Comprehensive health insurance including medical, dental, and vision for employees and dependents
- Tax savings benefits including HSAs and FSAs
- 18 weeks of paid parental leave
- Wellbeing programs, including family planning support, gender affirming care, hormone replacement therapy, and physical fitness/nutrition apps
- Mental health support and counseling
- Employee Assistance Program for financial/legal assistance and home life referrals
- Short-term and long-term disability coverage
- Life insurance and accident insurance
- Traveler insurance
- 401(k)
- Complimentary privacy protection service
- Wellness stipend
- Flexible paid time off
- 11 paid holidays per year
- Team offsites and annual all-company retreat
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability AssessmentCode ReviewCryptography FundamentalsIncident ResponseAutomated Security ChecksStatic AnalysisDynamic AnalysisTaint AnalysisFuzzingWeb2 Security Fundamentals
Soft Skills
Strong CommunicationInfluencing Without Authority
Tools & Technologies
GitHub ActionsEndor LabsCI/CDSecurity ToolingMalware Defenses
Industry Keywords
Web3Bug BountyAudit EngagementSecurity VulnerabilitiesMalicious dApps