• Provide expert legal advice to our teams as it relates to managing cybersecurity risks and compliance with global cybersecurity laws and regulations • Provide legal guidance on regulatory, third-party, and internal security audits, and work with teams to scope and perform periodic security hygiene assessments, mitigation, and remediation • Help enhance Docusign’s data governance posture, including data governance operations and documentation, employee training on data governance and security obligations, promoting a culture of awareness and compliance throughout the organization, policy enforcement, data compliance program monitoring and auditing, and third-party risk assessment • Collaborate with the global legal team to align security and data practices across the company, ensuring a unified approach to data protection • Support building and improving incident detection and response processes • Provide support and counsel during cybersecurity-related investigations and the response to data incidents, including breach notification and mitigation strategies, to minimize impact and maintain trust • Remain up-to-date on relevant data security laws and regulations, industry approaches to data governance program management, and on data compliance and security technological developments, threat vectors, and evolving industry standards to provide solutions to complex issues • Help prepare board and executive presentations, regulatory filings, and other legal disclosures to ensure accuracy and completeness of cybersecurity representations • Support global AI governance, helping the business teams continue innovating responsibly

• Maintain and improve the custody systems that hold validator keys, operational keys, and important objects for Mysten-run smart contracts and general on-chain operations, including key generation, storage, access controls, signing workflows, aggregation, rotation, and recovery procedures • Harden the signing path end-to-end: review and improve the code, infrastructure, and operational practices around how transactions are authorized, reviewed, and submitted on-chain • Build and improve anti-scam and anti-abuse tooling for the Sui ecosystem, detecting phishing sites, malicious dApps, drainer contracts, and other threats that target Sui users, and partnering with wallet ecosystem teams on mitigations. • Conduct code and design reviews of components that interact with sensitive keys or handle on-chain assets, with a focus on cryptographic correctness, access control, and operational safety • Participate in investigation and response for security issues and incidents that touch custody or ecosystem abuse, and drive concrete fixes that prevent the same class of issue from recurring

• Monitorar riscos em ecossistemas de agentes autônomos de IA • Testar modelos e soluções de IA identificando vulnerabilidades e riscos ao negócio • Realizar avaliações técnicas, usando IA para antecipar comportamentos anômalos e mal-intencionados • Desenvolver e entregar plataforma autônoma de assessment contínuo de superfície de riscos de IA • Conectar temas complexos de IT Risks e Cyber Risks entre públicos técnicos e não técnicos

• Lead and execute penetration tests across: Web and mobile applications, Cloud and infrastructure, Red team engagements • Work on and help shape advanced service offerings, pushing Packetlabs’ technical depth and differentiation • Support scoping and pre-engagement discussions, helping ensure projects are realistic, high-impact, and aligned with client risk • Actively coach and mentor consultants with a strong focus on long-term career growth • Conduct regular 1:1s focused on skills development, feedback, and career progression • Help team members identify their strengths, areas for growth, and learning paths (both technical and soft skills)