Senior Security Engineer, DeFi

Mysten Labs

. Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk .

Posted 9/24/2026full-timeRemote • United States, CanadaSenior💰 $165,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering and smart contract security within the DeFi ecosystem, with a strong focus on compliance, vulnerability assessment, and effective communication with both technical and non-technical stakeholders.

Highest-signal resume keywords

Security EngineeringSmart Contract SecurityDeFi Risk EngineeringTypeScript ProficiencyPython Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Static Analysis ToolingSQL ProficiencyBlockchain IndexersSmart Contract Code ReadingVulnerability AssessmentIncident ForensicsQuantitative ModelingEconomic ModelingProgram AnalysisDeFi Mechanics Understanding

Soft Skills

Strong Written CommunicationVerbal CommunicationInfluencing Skills

Tools & Technologies

RustSuiMoveLLM Agents

Industry Keywords

DeFi EcosystemComplianceAudit FindingsBug Bounty ReportsRecent DeFi Exploit History

Tech Stack

Tools & technologies

FlashPythonRustSQLTypeScriptWeb3

About the role

Key responsibilities & impact

Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk
Extend security team tooling, including precise static analysis tooling and proprietary agent skills
Measure and drive compliance with DeFi security recommendations across supported protocols
Run recurring compliance cycles, complete protocol report cards, validate security claims against on-chain reality, track remediation commitments, and escalate regressions or undisclosed incidents
Hunt for critical vulnerabilities in high-TVL Sui protocols through full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and incident forensics
Serve as the security team's point of contact for external DeFi teams and Mysten's DeFi products, including DeepBook
Conduct due diligence, coordinate incidents, and lead post-mortems
Write findings, reports, and runbooks that are actionable for protocol engineers and understandable to non-technical stakeholders
Ensure claims are traceable to bytecode, chain state, or data

Requirements

What you’ll need

Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience
3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering
Track record of building tools that ran in production and finding real vulnerabilities through audit findings, bug bounty reports, published research, or incident work
Strong understanding of DeFi mechanics and failure modes, including lending markets, AMMs, concentrated liquidity, perpetuals, liquid staking, oracles, flash loans, and MEV
Proficiency in TypeScript and Python
Comfort with Rust
Ability to write SQL over large datasets and work with blockchain indexers and data warehouses
Experience reading smart contract code at source, bytecode, or disassembly level, or evident ability to learn it quickly
Rigor in verifying claims against bytecode and chain state and documenting what was not verified
Strong written and verbal communication and ability to influence external teams without formal authority
Interest in the web3 space required
Employment contingent upon successful background check, potentially including employment history, education credentials, criminal history, and other relevant information
Sui and Move experience preferred
Knowledge of recent DeFi exploit history on Sui and other chains preferred
Experience building analysis or monitoring tools with LLM agents preferred
Static or dynamic program analysis experience preferred
Quantitative or economic modeling experience preferred
Publications, conference talks, CVEs, or bug bounty rankings preferred

Benefits

Comp & perks

Tokens and equity compensation
Eligibility to participate in annual equity and token refresh grant programs
Comprehensive medical, dental, and vision insurance for employees and dependents
Health Savings Accounts (HSAs) and Flexible Spending Accounts (FSAs)
18 weeks of paid parental leave
Wellbeing programs, including family planning support, gender affirming care, hormone replacement therapy, and physical fitness/nutrition apps
Mental health support and counseling
Employee Assistance Program (EAP) for financial/legal assistance and home life referrals
Short-term and long-term disability coverage
Life insurance and accident insurance
Traveler insurance
401(k)
Complimentary privacy protection service
Wellness stipend
Flexible paid time off
11 paid holidays per year
Team offsites and annual all-company retreat