Product Security Engineer

Job not on LinkedIn

🕒 April 13

🌐 Japan, Singapore – Remote

🇯🇵 Japan – Remote 🇸🇬 Singapore – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 55%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 214 days.
• Jobs at this company usually fill in 51 days.
• Reposted once.
• No salary listed.

Apply Now

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Startale Group

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

₿ Crypto

🌐 Web 3

💳 Fintech

💰 $3.5M Seed on 2024-03

Crypto • Web 3 • Fintech

<Startale Group> is a blockchain-focused technology company building an integrated web3 ecosystem that includes Soneium (a creator platform), Strium (a Layer-1 blockchain for tokenized securities and RWAs), Startale App (an all-in-one superapp), and Startale USD, a compliant stablecoin. The company develops developer tools, an Ethereum L2, and partners with institutional firms to enable on-chain real-world assets, payments, and digital economy experiences.

📋 Description

• Conduct hands-on security testing of applications, APIs, and infrastructure • Simulate real attack scenarios against products • Identify vulnerabilities and work pragmatically with engineers to fix them • Build threat models for new services and features, especially Strium's trading engine, order book, and transaction flows • Identify attack surfaces, model adversary behavior, and define security hardening requirements before launch • Own vulnerability findings from discovery through severity assessment, developer-facing write-ups, remediation guidance, and fix verification • Coordinate with engineers to close security issues • Manage incoming whitehat reports, reproduce and validate findings, assess severity, and communicate with researchers • Assess security risks of AI tools, including data exfiltration, prompt injection, and training-on-input risks • Maintain security baselines for AI coding tools and review AI-powered internal tools • Report to the Security Lead • Collaborate daily with Backend, Frontend, DevOps, and Blockchain engineering teams

🎯 Requirements

• 5+ years of hands-on experience focused on application security, penetration testing, or product security • Demonstrated ability to find vulnerabilities through manual testing, architecture and/or code review, or creative attack simulation • Practical experience with exchange or trading platform security, preferably from a DEX or DeFi protocol • Understanding of order book mechanics, transaction flows, wallet security, and trading-infrastructure threats • Scripting and automation ability • Experience triaging vulnerabilities and writing actionable remediation guidance for developers • Strong written communication in English • Experience with cloud infrastructure security, including least-privilege enforcement, network security, and secrets management • Experience with container security, including network policies, RBAC, pod security standards, image scanning, Dockerfile hardening, and base image management • Ability to read and review code in at least one of TypeScript/JavaScript, Solidity, or Rust • Understanding of software supply chain security, dependency risks, build integrity, and component tracking • Experience managing or participating in a bug bounty program • Experience securing AI/LLM tooling, including prompt injection risks, data leakage prevention, and tool configuration hardening is a plus • Japanese language ability is useful but not required • Must have at least 3 hours of overlap with Tokyo business hours (JST, UTC+9) for remote work

🏖️ Benefits

• Professional growth opportunity through owning the security posture of complex products • Direct influence over product security across the organization • Opportunity to work in a stable and well-funded company with the autonomy and speed of a small team • Remote-friendly work arrangement for exceptional candidates • Target start as soon as available, with a realistic target of Q3 2026

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume