Senior Security Engineer

🔥 3 hours ago

🇵🇱 Poland – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 14%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kraken Digital Asset Exchange

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

₿ Crypto

💸 Finance

💳 Fintech

Crypto • Finance • Fintech

Kraken Digital Asset Exchange is a cryptocurrency platform that facilitates the buying and selling of over 200 cryptocurrencies, including Bitcoin, Ethereum, and many others. Founded in 2011, Kraken provides a comprehensive suite of features for both beginner and advanced traders, such as advanced trading interfaces and margin trading. The platform emphasizes industry-leading security, deep liquidity, and 24/7 customer support, making it a trusted choice for users worldwide. Kraken caters to individual investors as well as institutional clients, offering services like OTC trading and custody. The company is committed to transparency with its proof of reserves and mission-driven values. Kraken operates globally, supporting clients in over 190 countries, with a quarterly trading volume exceeding $207 billion. However, users are advised of the high risk of crypto investments and the lack of regulation in some jurisdictions.

📋 Description

• Coordinate and review smart-contract audits • Respond to security questionnaires and due-diligence requests • Support CISO and compliance initiatives • Track findings through completed remediation • Conduct penetration tests of web applications, APIs, backend services, and on-chain components • Build repeatable security assessment tooling • Threat-model new and existing systems • Review architecture and key-management flows • Maintain a current view of risks and mitigations • Review code involving authentication, cryptography, custody, signing, and fund movement across blockchains • Improve secrets handling, IAM, least privilege, dependency and supply-chain security, detection, and logging • Secure custody and signing workflows, including MPC/HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures • Contribute TypeScript product-engineering backlog work • Support security detection, triage, incident response, and post-mortems • Partner with Payward security, CISO, and compliance functions • Report into engineering

🎯 Requirements

• Production code development and review experience, especially TypeScript and Node.js • Strong application and infrastructure security fundamentals, including OWASP-class vulnerabilities, authentication and authorization, injection, SSRF, supply-chain risk, and secure design • Hands-on offensive security experience in penetration testing, vulnerability research, or red teaming • Applied cryptography knowledge, including symmetric and asymmetric primitives, hashing, signatures, and key management • Blockchain security knowledge across EVM and Solana; ideally TON or Tron • Ability to read smart contracts and reason about failure modes • Ability to independently drive ambiguous security work, audits, questionnaires, or incidents to closure • Ability to communicate risks to engineers, a CISO, and auditors • Automation-oriented approach to converting findings into tests, alerts, controls, documentation, or platform improvements • Ability to assess severity, likelihood, impact, and remediation tradeoffs • Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers (nice to have) • Cloud security experience in GCP or AWS, IAM, and container/runtime hardening (nice to have) • Detection engineering and security observability, including SIEM and log-based detections (nice to have) • OSCP, OSWE, or GWAPT certification (nice to have) • Prior experience in regulated fintech or tokenization/DeFi (nice to have) • Ability to work from an eligible country/location and address work sponsorship requirements

🏖️ Benefits

• Opportunity to work at Payward, the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks • Remote work arrangement • Work alongside global teams and diverse colleagues • Applications accepted on an ongoing basis unless a deadline is stated • Equal opportunity employment • Job-related skills or work-style assessments considered alongside experience and interviews • Kraken product dogfooding after joining