M

Mysten Labs

Decentralized blockchain infrastructure and Move language

Staff Security Engineer - Walrus

Full-TimeUpdated on 10/21/2026
$180k - $264k/yr
Senior, Expert
Bachelor's, Master's
Remote in USA+1 moreMore locations: Remote in Canada
Remote
CybersecuritySecurity Engineering & Architecture

About the job

Requirements
  • A bachelor's or master's degree in Computer Science, Computer Engineering, or equivalent experience.
  • At least 8 years of industry experience in security engineering, with a track record of operating at a Staff (E6) level or equivalent.
  • Extensive experience as a security generalist across infrastructure, application, and cryptographic security domains.
  • Strong proficiency in building, deploying, and managing automated security tooling, with a demonstrated history of using AI/ML or advanced static/dynamic analysis to improve security outcomes at scale.
  • Deep expertise collaborating with engineering teams during the design phase to proactively identify and mitigate high-risk design flaws.
  • Excellent communication skills and the ability to influence technical direction and lead cross-functional security initiatives.
Responsibilities
  • Lead security assessments for new Walrus features and contribute to security initiatives across the broader Mysten ecosystem, identifying systemic risks and providing actionable remediation plans for complex architectural challenges.
  • Drive a security-by-design culture by ensuring security considerations are included before code is written, within Walrus and the wider Mysten organization.
  • Use AI-driven tools and advanced automation to identify and remediate low-hanging fruit, enabling the team to focus on high-impact, complex security research.
  • Provide strategic oversight on broader infrastructure and product security issues affecting Walrus and beyond.
  • Collaborate with engineering leadership to prioritize security roadmap items, balancing feature velocity with the security posture of the platform.
  • Mentor senior and junior engineers, set technical direction for security standards, and establish best practices across the engineering organization.
Desired Qualifications
  • Technical understanding of decentralized storage, distributed systems, or the Web3 stack; prior experience is a plus but not required.
  • Experience leading security-focused transformations or implementing security-by-design frameworks in high-growth engineering environments.
  • Ability to balance tactical, hands-on security work with strategic long-term planning and leadership.

About the company

Mysten Labs builds the infrastructure for a decentralized internet. It develops Sui, a blockchain that uses proof of stake for security and consensus, designed to handle many users and large amounts of data with scalable throughput and storage. It also maintains Move, an open-source programming language for writing smart contracts on blockchains. Together, these tools let developers create and manage digital assets and applications that are owned directly by users rather than controlled by a single company. Mysten Labs differentiates itself by offering a broad set of products and services that help people access and use digital assets, plus ongoing updates and opportunities to engage with the ecosystem. The company’s goal is to enable true digital asset ownership for billions of people and advance the decentralized future.

Company Size

51-200

Company Stage

Series B

Total Funding

$336M

Headquarters

Palo Alto, California

Founded

2021

Get referred to Mysten Labs

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Sui mainnet surpassed 6 million TPS after programmable lightning tunnels in July 2026.
  • Merkle Science launched Confidential Transfers public beta on June 8, 2026.
  • tZERO integration and Securitize fund launch expand regulated tokenized-asset distribution on Sui.

What critics are saying

  • Sam Blackshear left for Anthropic on August 6, 2026; technical depth narrows.
  • Sui halted twice on May 28-29, 2026; reliability risk persists under load.
  • A catastrophic validator or smart-contract exploit could freeze trust and kill institutional adoption.

What makes Mysten Labs unique

  • Mysten Labs shipped Sui mainnet, Move, Walrus, and Seal MPC in 2026.
  • Sui handled $1 trillion stablecoin volume since August, per Mysten Labs on May 7.
  • Zero-fee stablecoins and confidential transfers target payments, privacy, and compliance simultaneously.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Remote Work Options

Growth & Insights and Company News

Headcount

6 month growth

5%

1 year growth

5%

2 year growth

3%
Wu Blockchain
Oct 13th, 2026
Sui Devnet adds post-quantum signature support, targets Mainnet rollout in Q1 2027.

Sui Devnet adds post-quantum signature support, targets Mainnet rollout in Q1 2027. Oct 13, 2026 07:05 Mysten Labs co-founder and chief cryptographer Kostas Chalkias announced that Sui Devnet has successfully processed its first native quantum-safe transaction, sharing the on-chain transaction record. Sui's core developer Mysten Labs has introduced ML-DSA-65 post-quantum signature support in Devnet release v1.82.0, allowing signed transactions to be submitted through the ExecuteTransaction API and verified through the VerifySignature API. ML-DSA-65 is also supported in multisignature transactions, with additional integration into GraphQL and the Rust SDK. According to Sui's previously announced roadmap, native ML-DSA-65 accounts are expected to reach Testnet by the end of 2026, with native account authentication on Mainnet targeted for Q1 2027, subject to security audits and testing results. In September 2026, spot trading volume across major exchanges totaled about $696.7 billion, up approximately 36.5% from $510.4 billion in August 2026. WuBlockchain · Oct 13, 2026 04:53 Broadcom and NVIDIA will discuss open AI networking and AI factory infrastructure, with subsequent sessions covering optical interconnects, 800 VDC power and liquid cooling. WuBlockchain · Oct 12, 2026 03:24 Key events: Broadcom/NVIDIA AI AIoT, ASML Q3, Sep CPI/PPI, Retail, EIA inventories; Warsh-Georgieva discuss economy. WuBlockchain · Oct 12, 2026 00:21 The content on this website is for informational purposes only and does not endorse any business or investment activities. Readers should comply with local laws and avoid illegal financial activities. No part of WuBlockchain's content may be reproduced without permission. Legal action will be taken against violators. Beware of fake accounts - WuBlockchain only shares blockchain information, does not engage in politics, never requests transfers via private messages, or promotes any specific token. Do not trust such claims.

Gate.com
Oct 8th, 2026
Anyflo emerges from stealth, acquires sui-based startup Native.

Anyflo emerges from stealth, acquires sui-based startup Native. 2026-10-08 13:03:30 Key takeaways. * Anyflo emerged from stealth at Sui Basecamp as a stablecoin payments orchestration company and acquired Native. * Anyflo was incubated within Mysten Labs and is led by Lola Oyelayo-Pearson, a former Mysten general manager. * Anyflo is entering private alpha this month with production previews and liquidity onboarding planned. Anyflo emerged from stealth at Sui Basecamp on Thursday as a stablecoin payments orchestration company and announced the acquisition of Native, a Sui-based project team. The company is entering private alpha this month, positioning itself as an infrastructure layer that handles blockchain, liquidity, and routing complexity for enterprise users seeking stablecoin functionality. Anyflo was incubated within Mysten Labs and is led by Lola Oyelayo-Pearson, a former Mysten general manager with prior experience building financial products at Shopify and Capital One, targeting businesses that want stablecoin settlement without managing underlying blockchain operations. Anyflo acquires Native team in acqui-hire deal. Anyflo structured the Native acquisition as an acqui-hire, bringing the Native team into the company rather than purchasing a standalone protocol. Native was recognized in the Sui developer ecosystem and worked on Bitcoin and lending-related infrastructure. Financial terms for the acquisition were not disclosed. The deal adds Sui-specific expertise to Anyflo's technical stack. Company targets enterprise stablecoin users. Anyflo describes itself as a multi-chain orchestration layer for companies that want to use stablecoins without building blockchain infrastructure themselves. The target customer is a business seeking stablecoin settlement, treasury, or payment functionality without managing which blockchain a customer uses, where liquidity sits, or how money should be routed between networks. In practice, an enterprise can build a stablecoin payment flow while Anyflo handles network selection, routing, and access to liquidity underneath. Lola Oyelayo-Pearson leads Mysten Labs spinout. Lola Oyelayo-Pearson leads Anyflo as a former Mysten general manager who previously worked on financial products at Shopify and Capital One. That background informs the company's focus on enterprises that want stablecoin functionality integrated into existing business operations rather than crypto-native trading platforms. Private alpha launches this month. Anyflo is entering private alpha this month, with production previews and liquidity onboarding planned as the product develops. The company positions its launch at a moment when stablecoins are becoming a crypto sector where enterprise demand centers on moving dollars across borders, settling suppliers, holding digital cash, or connecting to on-chain markets. Faq. What did Anyflo announce at Sui Basecamp? Anyflo emerged from stealth at Sui Basecamp on Thursday as a stablecoin payments orchestration company and announced the acquisition of the Native team, a Sui-based project. The company is entering private alpha this month. Who leads Anyflo and what is their background? Lola Oyelayo-Pearson leads Anyflo. She is a former Mysten general manager who previously worked on financial products at Shopify and Capital One. Anyflo was incubated within Mysten Labs. What does Anyflo's orchestration layer do for enterprises? Anyflo handles blockchain, liquidity, and routing complexity for enterprise users, allowing businesses to build stablecoin payment flows without managing which blockchain customers use, where liquidity sits, or how money routes between networks. Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.

Cointelegraph
Oct 8th, 2026
Sui's Hashi to launch with $500M in Bitcoin finance commitments.

Sui's Hashi to launch with $500M in Bitcoin finance commitments. Hashi has more than $500M in commitments ahead of mainnet launch, while Anchorage offers institutions settlement and self-custody. Mysten Labs' Hashi Bitcoin finance network will begin a phased rollout in October with more than $500 million in capital commitments from its launch partners. Hashi uses Bitcoin (BTC) as collateral in Sui applications by minting hBTC on Sui against deposited Bitcoin, the Sui Foundation announced Thursday. Applications could include lending, borrowing, credit, vaults and structured products. When users exit, hBTC is burned and the underlying BTC is returned to the Bitcoin network. Sui said the network's launch coalition includes more than 20 companies, including BitGo, Bullish, Cumberland, FalconX and Ledger. It named Aftermath, Concrete and Fluid among the providers expected to run Hashi vaults. Anchorage Digital has joined the coalition as a launch partner, offering institutional clients access through its settlement infrastructure and self-custody wallet. The company also plans to provide stablecoin liquidity to Hashi, according to the announcement. "Public companies and institutions hold enormous amounts of Bitcoin, but their ability to use that capital has been constrained by the technology available to them and the limitations of the DeFi space," said Nathan McCauley, CEO and co-founder of Anchorage Digital. Hashi was developed by Mysten Labs, the founding contributor to Sui. The foundation said third parties will independently create and offer financial products using the infrastructure. Get more of Cointelegraph on Google Add Cointelegraph as a preferred source for Google Search. Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph's Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Crypto-Economy
Oct 7th, 2026
Sui hits record 40.6M TPS in AI agent transaction test.

Sui hits record 40.6M TPS in AI agent transaction test. * C. Monasterio * Published: October 7, 2026 * 11:44 pm * Updated: October 7, 2026 * 11:44 pm Table of Contents * During the live demonstration at Sui Basecamp in Singapore, an off-chain tunnel throughput peak of 40,614,180 transactions per second was recorded. * The technical test ran over 10,000 programmable channels opened on mainnet to simulate payments, gaming, and messaging workloads. * Cybersecurity firm CertiK was appointed as an independent auditor to verify the execution logs and cryptographic proofs. The Sui network completed a live technical demonstration processing a peak throughput of 40.6 million transactions with AI agents via off-chain programmable channels. The technical milestone was presented this Wednesday, October 7, by Adeniyi Abiodun, co-founder and Chief Product Officer of Mysten Labs, during the Sui Basecamp conference in Singapore. Off-Chain programmable tunnel architecture. The initial target set by developers for the session of 20 million TPS was doubled. The final tally reached 40,614,180 transactions per second, also shattering the previous benchmark from July, when the protocol clocked approximately 6.1 million TPS under a comparable framework. The tested infrastructure relied on more than 10,000 tunnels anchored to mainnet. According to technical documentation from the Sui Foundation, each channel requires only one on-chain transaction to open and one to close. Intermediate interactions between software agents are processed entirely off the primary ledger. The Mysten Labs report indicates that this design enables continuous, high-frequency exchanges without congesting distributed consensus. Upon concluding a session, participants co-sign the final state, which settles definitively on the base layer. The benchmark simulated operating environments for automated payments, gaming interactions, and instant messaging applications. According to statements by Adeniyi Abiodun, the achieved throughput meets the operational demands of autonomous software, as human end-users do not require such extreme transaction frequencies. The technical initiative connects back to the network's prior integration into Google's Agentic Payments Protocol, announced in September 2025. Through this open-source standard, automated agents can execute scheduled microtransactions on behalf of users to bypass paywalls, acquire digital content licenses, and purchase online services. Payments ecosystem, liquidity, and technical audit. The push into agentic infrastructure coexists alongside expanding on-chain network liquidity. On March 4, 2026, the Sui Foundation rolled out its native stablecoin, USDsui, issued via the Open Issuance platform by Stripe subsidiary Bridge. Foundation metrics show the network processed over $111 billion in stablecoin transfers during January 2026. Unlike monthly settlement volumes on layer 1, the October benchmark evaluated the raw message throughput and micro-exchanges executed per second across parallel channels. Across U.S. institutional markets, investment products tied to the native token SUI broadened in early 2026. On February 18, trading commenced for Canary Capital's SUIS fund on the Nasdaq index and Grayscale's GSUI on NYSE Arca, both structured as spot funds featuring integrated staking rewards. Subsequently, on July 22, cryptocurrency exchange Coinbase enabled staking services for the asset. The methodological validity of the benchmark test remains subject to third-party review. Cybersecurity auditing firm CertiK initiated a technical inspection of the execution logs, transaction histories, and cryptographic proofs collected during the Singapore demonstration, with the publication of its formal audit report scheduled for the coming days. Technology TL;DR: Eric Trump spoke this Wednesday at the Token2049 conference held in Singapore before tech sector investors. The businessman co-founded World Liberty Financial, the issuing flash news The Verona network, formerly known as XION, rolled out verUSD, a new dollar-pegged stablecoin specifically engineered to settle transactions and purchase verified data between artificial CryptoNews TL;DR: Quant (QNT) recorded a 300% surge over the weekly timeframe following the announcement of institutional adoption by The Clearing House. Bitway (BTW) trades at Technology TL;DR: Vitalik Buterin addressed the evolution of privacy on September 23, 2026, at the 12th Global Blockchain Summit. Artificial intelligence systems and advanced analytics process Stablecoins TL;DR: BlackRock published its research report titled The Machine-Native Economy on September 22, 2026, focusing on the convergence between artificial intelligence agents and digital asset CryptoNews TL;DR: The National Bank of Kazakhstan will deploy the National Crypto Analytics Hub on its SupTech supervisory architecture. The infrastructure will integrate with the state Follow Crypto Economy on Social Networks Crypto Tutorials Crypto Reviews

CryptoTimes
Oct 6th, 2026
Mysten Labs, Google Cloud build AI agent evidence layer on Sui.

Mysten Labs, Google Cloud build AI agent evidence layer on Sui. The system stores agent telemetry in customer-controlled Google Cloud Storage while recording cryptographic proofs on Walrus and coordinating them through the Sui blockchain. Published 4 hours ago · Updated 2 hours ago Key Highlights * Mysten Labs and Google Cloud announced the Verifiable Agent Arbiter (VAA) as an evidence layer for AI agent activity. * VAA creates independently verifiable records covering prompts, model outputs, tool calls, and policy decisions. * Detailed telemetry remains in customer-controlled Google Cloud Storage, while cryptographic proofs are stored on Walrus and coordinated on Sui. Mysten Labs, working with Google Cloud, announced Verifiable Agent Arbiter (VAA) on Tuesday. The evidence layer is designed so that cryptographic proofs of AI agent activity are stored on Walrus and coordinated on the Sui blockchain, while detailed records remain under customer control. According to the official announcement, VAA produces records of agent activity that can be verified independently of the platform that generated them. Organizations seeking to place agents into production currently lack records that counterparties, auditors, or regulators can rely on. VAA is intended to supply those records and support compliance with requirements such as the EU AI Act. Structure of evidence layer and listed capabilities. The announcement further notes that VAA keeps the detailed record of an agent's activity separate from the cryptographic proof of that record's integrity. Telemetry data, including prompts, model outputs, tool calls, and policy decisions, remains in customer-controlled Google Cloud Storage. Cryptographic proofs of the record are stored on Walrus, a data platform, and coordinated on the Sui Layer 1 blockchain. When agents from different organizations transact under the Agent2Agent (A2A) protocol, which Google Cloud developed and donated to the Linux Foundation, both parties can replay a disputed workflow against the same verifiable receipts. The process is intended to establish what was committed, what was delivered, and where a failure occurred. Security teams can reconstruct the instructions, policies, decisions, outputs, and tool actions linked to a suspected unauthorized execution. The reconstruction is designed to distinguish among prompt-injection attacks, policy bypasses, model failures, and post-incident alterations to logs. Archived evidence can be re-proven under future cryptographic standards, including post-quantum methods, while retaining its connection to the original record. VAA links to the Sui Agent Payments facilitator, which enables agents to discover services and settle payments for API calls under the x402 protocol. The system records the underlying authorization, spending decisions, and service delivery. Related developments on AI agents. On September 29, blockchain security firm Blockaid published a blog post addressing risks associated with AI trading agents. The firm stated that malicious instructions can be embedded in token names, symbols, and descriptions. If an AI system treats that text as an instruction rather than untrusted data, it may generate an unintended transaction. The risk increases when the agent is connected to a wallet or has authority to execute transactions. In a September 2026 whitepaper titled The Machine-Native Economy, BlackRock's Digital Assets Research group examined the intersection of artificial intelligence and digital assets. The paper, authored by Will Su, Robert Mitchnick, Jay Jacobs, and William Helm, describes AI systems as machine-native intelligence and crypto assets as machine-native money. It states that as AI systems become capable of multistep tasks with limited human oversight, they will require native payment methods, and that traditional payment infrastructure is not well suited to that requirement. Meanwhile, Binance published a leadership blog stating that centralized trading platforms will need to serve software agents in the same manner they currently serve human customers. The post references a developer layer the company introduced earlier in the year. No further technical specifications, deployment timelines, or commercial terms for VAA were included in the Mysten Labs and Google Cloud statement. Disclaimer: The information researched and reported by The Crypto Times is for informational purposes only and is not a substitute for professional financial advice. Investing in crypto assets involves significant risk due to market volatility. Always Do Your Own Research (DYOR) and consult with a qualified Financial Advisor before making any investment decisions.