5 hours ago
Remote, United StatesMid Level
Base Salary
$190k - $240k/yr
Responsibilities
- Review red-team findings, reproduce issues, eliminate false positives, assign severity, improve scoring, and write actionable remediation tickets.
- Harden backend services and APIs, particularly money-moving paths, and write security fixes when needed.
- Own edge defenses including DDoS protection, rate limiting, WAF rules, and abuse controls.
- Create secure configuration baselines for cloud, code, and SaaS systems and convert them into automated checks.
- Expand the pull-request security gate to block more vulnerabilities before merge.
- Own attack-surface coverage and conduct architecture reviews for new and high-risk systems.
- Evaluate, select, adopt, or build security tools.
Requirements
- 4+ years of experience in application security, product security, or security-minded backend engineering.
- Demonstrated ownership of security decisions and ability to influence senior engineers on design changes.
- Ability to read unfamiliar TypeScript/Node.js codebases and identify meaningful vulnerabilities.
- Hands-on cloud security experience, ideally with GCP, plus Terraform and edge-defense technologies such as WAFs and rate limiting.
- Experience with threat modeling or architecture reviews and evaluating security tools through tool bake-offs.
- Comfort shipping automated security checks and using AI tools critically.
- Fintech, payments, card-issuing, or PCI DSS experience is a bonus.
- Penetration testing, bug bounty, red-team, security-scanner, static-analysis-rule, or LLM-based review-tool experience is a bonus.
- AI security for agents and agentic payments or corporate security alongside IT experience is a bonus.
Benefits
- Unlimited time off with a requirement to take at least 10 days annually.
- Flexible work from home, in an office, or a combination, plus a new-hire home-workspace stipend.
- For US employees, 95% coverage of employee health, dental, and vision costs, 90% coverage for dependents, and company-subsidized life insurance.
- 401(k) with a 4% company match.
- Equity option plan.
- Monthly health and wellness stipend.
- Office lunch and dinner covered through a DoorDash credit.
- Domestic and international team and company offsites.
Categories
About Rain
Rain builds a card issuance and payments infrastructure platform for enterprises, fintechs, and platforms to use tokenized money in real-world transactions. Its services include compliant program management, digital-asset authorization and settlement, and rails that power stablecoin-backed cards, cross-border payouts, B2B purchases, and remittances. Founded in 2021, the privately held company partners with financial institutions and neobanks worldwide and is backed by investors such as ICONIQ, Lightspeed, Khosla, Galaxy, Sapphire, and Norwest.