Security Engineer, Mysten Labs
$140-190k
+ Equity
Foundational infrastructure for Web 3.0
Be an early applicant
Foundational infrastructure for Web 3.0
201-500 employees
Be an early applicant
$140-190k
+ Equity
201-500 employees
Company mission
To create foundational infrastructure for Web 3.0.
Role
Who you are
- 3+ years of hands-on experience in security engineering, application security, or product security
- Knowledge relevant to key management in production, for example HSMs, cloud KMS, MPC or threshold-signature systems, hardware wallets, or comparable custody infrastructure
- Proficiency in one or more of: Rust, TypeScript, Python, or Move, and experience reviewing and writing security-sensitive code
- Solid understanding of applied cryptography fundamentals and the common ways cryptographic systems are misused in practice
- A builder mentality: comfortable operating with ambiguity, diving into unfamiliar codebases, and shipping the fix yourself rather than handing it off
- Strong written and verbal communication: you can explain a finding or an issue clearly to the engineer who needs to fix it and to a non-technical stakeholder who needs to understand the risk
- Interest in the web3 space is required; prior experience shipping in crypto, fintech, or other regulated/high-stakes environments is a plus
What the job involves
- Security engineers own the operational and software security of the Sui blockchain, wallet, Move language, and other Mysten systems
- Security engineers support and work closely with the engineers working on the sensitive components of these systems. In addition, they are the key points of contact for audit engagements and bug bounty reports
- We are hiring security engineers now as we expand the ecosystem and production services. We have a strong team in protocol security, but we need experts in operational and software security who can help us navigate the challenges of running world class infrastructure
- Maintain and improve the custody systems that hold validator keys, operational keys, and important objects for Mysten-run smart contracts and general on-chain operations, including key generation, storage, access controls, signing workflows, aggregation, rotation, and recovery procedures
- Harden the signing path end-to-end: review and improve the code, infrastructure, and operational practices around how transactions are authorized, reviewed, and submitted on-chain
- Build and improve anti-scam and anti-abuse tooling for the Sui ecosystem, detecting phishing sites, malicious dApps, drainer contracts, and other threats that target Sui users, and partnering with wallet ecosystem teams on mitigations
- Conduct code and design reviews of components that interact with sensitive keys or handle on-chain assets, with a focus on cryptographic correctness, access control, and operational safety
- Participate in investigation and response for security issues and incidents that touch custody or ecosystem abuse, and drive concrete fixes that prevent the same class of issue from recurring
Our take
Mysten Labs was created with the ambition to build a blockchain comparable to Ethereum or Solanan - but with even greater capabilities. That means tackling pain points currently found in blockchain technology, like scaling transactions and speed to meet growing demand.
To do this, Mysten is building foundational infrastructure for Web 3.0 which supports the accelerated development and adoption of decentralized services. The startup is determined to build a platform that finally lets Web 3.0 developers focus on UI, without compromising on security.
The company has focussed on expanding partnerships with existing networks such as Ethos and Orange Comet Partners, who have integrated Mysten technology, as well as open protocols based on Mysten-designed components. Ensuring that it assigns developer and community outreach resources in the right places will be crucial to building a sustainable business in this relatively young space.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Sep 2022
$300m
SERIES B
Dec 2021
$36m
SERIES A
Total funding: $336m
Company HQ
SoMa, San Francisco, CA
Leadership
Evan Cheng
(Co-Founder & CEO)Previously Director of R&D for Novi Financial at Meta. Also worked as Director of Engineering at Facebook and spent over a decade in senior engineering positions at Apple.
Adeniyi Abiodun
(Co-Founder & CPO)Former Product Lead at Novi for Meta. Also worked as Head of Product for VMware's Blockchain division and led the Blockchain Cloud Platform team at Oracle.
Sam Blackshear
(Co-Founder & CTO)Previously Principal Engineer for Novi Financial working on the Move language and Diem platform. Also worked as a Staff Engineer for Facebook. Ex-Microsoft and University of Colorado Research Assistant.
George Danezis
(Co-Founder & Chief Scientist)Professor of Security and Privacy Engineering in the Information Security Group at University College London. Previously a Research Scientist at Facebook, and has a Cryptography PhD from the University of Cambridge.
Share this job
View 8 more jobs at Mysten Labs