Senior Security Engineer - xStocks
Posted Updated
Summary
Senior Security Engineer at Kraken (Payward) working on xStocks: owns security audits and questionnaires through remediation, pentests web apps, APIs, services and on-chain components, secures custody/signing workflows (MPC, HSM), and supports incident response, while also contributing TypeScript/Node.js product engineering.
You will own security work from audits and questionnaires through remediation. You will pentest applications, APIs, services, and on-chain components; threat-model systems; review security-sensitive code; improve platform hardening; secure custody and signing workflows; contribute TypeScript engineering work; and support incident response.
Responsibilities
- Own security deliverables, audits, questionnaires, and remediation
- Pentest web applications, APIs, backend services, and on-chain components
- Build repeatable security-testing tooling
- Threat-model systems and review architecture and key-management flows
- Review code affecting authentication, cryptography, custody, signing, and fund movement
- Improve secrets handling, IAM, supply-chain hygiene, detection, and logging
- Secure transaction signing, MPC, HSM, permissions, and approval workflows
- Contribute TypeScript product-engineering work
- Support incident detection, triage, response, and post-mortems
Requirements
- Production software engineering experience with TypeScript and Node.js
- Application and infrastructure security fundamentals
- Offensive security experience in pentesting, vulnerability research, or red teaming
- Applied cryptography and blockchain security knowledge
- Knowledge of EVM and Solana security models
- Ability to read and assess smart contracts
- Risk assessment and remediation judgment
- Clear communication with engineers, auditors, and security leadership