6 hours ago
Singapore, SingaporeSenior
Responsibilities
- Review platform and product code and system designs to identify security vulnerabilities and potential attack paths.
- Conduct red-team exercises, penetration tests, and continuous vulnerability testing across applications and systems.
- Investigate and help remediate security vulnerabilities from identification through resolution.
- Build and ship secure solutions in collaboration with Product and Engineering teams.
- Write and contribute to internal security tools, libraries, and automation.
- Educate engineering teams on secure coding and security practices.
- Monitor emerging threats, vulnerabilities, and attack techniques relevant to the company.
- Assist with third-party application security reviews and penetration tests.
Requirements
- Strong software engineering experience with a security background.
- Strong programming experience in one or more of Go, Rust, or Java.
- Professional security experience in fintech, banking, payments, crypto, or a similar financial technology environment.
- Hands-on experience with red teaming and penetration testing.
- Strong understanding of attacker tools, techniques, and software vulnerability exploitation.
- Ability to work independently and own security problems through remediation.
- Strong communication skills for explaining security issues to engineering teams.
- Experience writing secure backend code in Go, Rust, or Java is preferred.
- Familiarity with authentication and authorization patterns such as OAuth2 and RBAC is preferred.
- Understanding of blockchain technologies and cryptocurrency security implications is preferred.
- Experience in a fast-paced startup environment is preferred.
Benefits
- Opportunity to work on real-world security challenges in a regulated, fast-growing fintech environment.
- Collaboration with the founding team from Monzo and BigPay and experienced engineers.
- Opportunity to develop a security career while the company is undergoing major growth.
About Pave Bank
Pave Bank builds programmable banking and payments infrastructure for businesses, spanning fiat and digital-asset accounts, cross-border payments, trading, and treasury workflows. Its API-based platform targets enterprises that need regulated financial rails and digital-asset services, combining banking functionality with automation. Founded in 2023 and headquartered in Singapore, the company is privately held.