Senior Security Engineer, DeFi

Posted last week

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Senior Security Engineer protecting Mysten Labs’ Sui blockchain DeFi ecosystem. Monitoring economic risks, auditing smart contracts, and preventing vulnerabilities across DeFi protocols.

Responsibilities

  • Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk
  • Extend security team tooling, including precise static analysis tooling and proprietary agent skills
  • Measure and drive compliance with DeFi security recommendations across supported protocols
  • Run recurring compliance cycles, complete protocol report cards, validate security claims against on-chain reality, track remediation commitments, and escalate regressions or undisclosed incidents
  • Hunt for critical vulnerabilities in high-TVL Sui protocols through full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and incident forensics
  • Serve as the security team's point of contact for external DeFi teams and Mysten's DeFi products, including DeepBook
  • Conduct due diligence, coordinate incidents, and lead post-mortems
  • Write findings, reports, and runbooks that are actionable for protocol engineers and understandable to non-technical stakeholders
  • Ensure claims are traceable to bytecode, chain state, or data

Requirements

  • Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience
  • 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering
  • Track record of building tools that ran in production and finding real vulnerabilities through audit findings, bug bounty reports, published research, or incident work
  • Strong understanding of DeFi mechanics and failure modes, including lending markets, AMMs, concentrated liquidity, perpetuals, liquid staking, oracles, flash loans, and MEV
  • Proficiency in TypeScript and Python
  • Comfort with Rust
  • Ability to write SQL over large datasets and work with blockchain indexers and data warehouses
  • Experience reading smart contract code at source, bytecode, or disassembly level, or evident ability to learn it quickly
  • Rigor in verifying claims against bytecode and chain state and documenting what was not verified
  • Strong written and verbal communication and ability to influence external teams without formal authority
  • Interest in the web3 space required
  • Employment contingent upon successful background check, potentially including employment history, education credentials, criminal history, and other relevant information
  • Sui and Move experience preferred
  • Knowledge of recent DeFi exploit history on Sui and other chains preferred
  • Experience building analysis or monitoring tools with LLM agents preferred
  • Static or dynamic program analysis experience preferred
  • Quantitative or economic modeling experience preferred
  • Publications, conference talks, CVEs, or bug bounty rankings preferred

Benefits

  • Tokens and equity compensation
  • Eligibility to participate in annual equity and token refresh grant programs
  • Comprehensive medical, dental, and vision insurance for employees and dependents
  • Health Savings Accounts (HSAs) and Flexible Spending Accounts (FSAs)
  • 18 weeks of paid parental leave
  • Wellbeing programs, including family planning support, gender affirming care, hormone replacement therapy, and physical fitness/nutrition apps
  • Mental health support and counseling
  • Employee Assistance Program (EAP) for financial/legal assistance and home life referrals
  • Short-term and long-term disability coverage
  • Life insurance and accident insurance
  • Traveler insurance
  • 401(k)
  • Complimentary privacy protection service
  • Wellness stipend
  • Flexible paid time off
  • 11 paid holidays per year
  • Team offsites and annual all-company retreat

Job title

Job type

Full Time

Experience level

Senior

Salary

$165,000 - $225,000 per year

Degree requirement

Bachelor's Degree

Tech skills

FlashPythonRustSQLTypeScriptWeb3

Location requirements

RemoteUnited States

Report this job

Found something wrong with the page? Please let us know by submitting a report below.