Security Engineer - AppSec
Rain · Remote · Remote ·
COMPENSATION
$200k – $260k
Listed on the employer's job board (Ashby)
- Fully remote or hybrid
- AppSec & Cloud Security
- TypeScript/Node.js
- GCP & Terraform
- Equity & 401(k) match
Join Rain's Security Engineering team to ensure the safety of systems that move real money globally. You will act as the primary expert for non-blockchain security, managing red team findings, hardening APIs, and defining secure configuration baselines. The team operates with autonomy, gating pull requests and collaborating closely with Security Operations to resolve vulnerabilities efficiently.
What you'll do
- Triage red team findings, reproduce issues, and write clear remediation tickets
- Harden backend services and APIs, often implementing fixes directly
- Manage edge defenses including DDoS protection, rate limiting, and WAF rules
- Create automated secure configuration baselines for cloud, code, and SaaS
- Enhance PR security gates to block vulnerabilities before code merges
- Conduct architecture reviews and maintain attack surface coverage
- Evaluate and select security tools through practical testing and bake-offs
What you'll need
- At least 4 years in application security, product security, or backend engineering
- Proven ability to influence senior engineers on security design decisions
- Proficiency in reading TypeScript/Node.js codebases to identify critical bugs
- Hands-on experience with GCP, Terraform, WAFs, and rate limiting
- Experience conducting threat models, architecture reviews, and tool evaluations
- Preference for automating checks over writing documentation
- Comfortable using AI tools critically without blind trust
Nice to have
- Background in fintech, payments, or card issuing with PCI DSS knowledge
- Experience in pentesting, bug bounties, or red team operations
- History of building security scanners, static analysis rules, or LLM tools
- Familiarity with AI security for agents or corporate IT security
Stack
- TypeScript
- Node.js
- GCP
- Terraform
- WAF
- AI tools
How you'll work
- Flexible workplace: remote, office, or hybrid options available
- Home workspace setup stipend provided for new hires
- Mandatory minimum of 10 days off per year from unlimited PTO policy
- In-office lunch and dinner covered via DoorDash credit
What you get
- 95% health, dental, and vision coverage for US employees
- 90% coverage for dependents plus fully subsidized life insurance
- 401(k) retirement plan with 4% company match
- Equity option plan for all employees
- Monthly stipend for health and wellness expenses
- Domestic and international team summits and offsites