Rain
Security Engineer - AppSec
$200K–$260K
Remote · Remote · Full-time · Posted Oct 5, 2026
- Experience
- 4+ years in application security, product security, or security-minded backend engineering.
About the job
Own application security for Rain’s non-blockchain systems, assessing findings and hardening backend services, APIs, cloud, and edge defenses that support money movement.
What you'll do
- Validate red-team findings, set severity, improve scoring, and provide actionable remediation tickets.
- Harden backend services, APIs, and edge defenses; write fixes and automate secure configuration checks.
- Expand PR security gates, assess attack surface, conduct architecture reviews, and evaluate security tools.
What they ask for
- 4+ years in application security, product security, or security-minded backend engineering.
- Ability to make and explain security decisions while maintaining strong working relationships with engineers.
- Ability to review TypeScript/Node.js code and distinguish significant vulnerabilities from false alarms.
- Hands-on cloud security, Terraform, and edge defenses such as WAFs and rate limiting; experience with threat models or architecture reviews and security-tool evaluations.
Nice to have
- Fintech, payments, or card issuing experience; PCI DSS is a plus.
- Pentest, bug bounty, red-team, security-scanner, static-analysis, LLM-review, or AI-agent security experience.
Pay
$200K – $260K USD base salary
Tools
TypeScript/Node.js, GCP, Terraform, WAFs
AI focus
Use AI tools heavily but critically; the team runs an AI-driven red team. Bonus work may include AI security for agents and agentic payments or building LLM-based review tools.
Model-written summary · the original posting is authoritative