Application Security Engineer at Rain

Role overview

This application-security role covers Rain’s payment services outside its blockchain security work.

Responsibilities

• Reproduce and prioritize red-team findings, filter false positives and create actionable fixes.
• Harden backend services and APIs, including money-moving paths; write fixes when useful.
• Own DDoS, rate-limiting, WAF and abuse defenses at the edge.
• Automate secure cloud, code and SaaS baselines; improve pull-request security checks and architecture reviews.

Qualifications

• At least four years in application security, product security or security-focused backend engineering.
• Ability to inspect unfamiliar TypeScript and Node.js code and distinguish significant bugs from noisy findings.
• Hands-on cloud security, Terraform, edge controls and threat modeling; GCP experience is preferred.

Technology in this role

• TypeScript: Ability to inspect unfamiliar TypeScript and Node.js code and distinguish significant bugs from noisy findings.
• GCP: Hands-on cloud security, Terraform, edge controls and threat modeling; GCP experience is preferred.

Benefits

• The posting lists flexible work, home-workspace support and unlimited time off with a ten-day minimum; US-based health and insurance benefits are described separately.

About Rain

Rain provides stablecoin payment infrastructure, including cards, wallets and cross-border services.

Browse job categories

Related jobs

• Senior Security Engineer at Maze — Maze
• Security Software Engineer, IAM at Vercel — Vercel
• Senior / Staff Security Engineer at Linear — Linear
• Infrastructure Security Engineer at ElevenLabs — ElevenLabs
• Security Engineer II at Mapbox — Mapbox
• Security Engineer II at Mapbox — Mapbox