Security Engineer

External

Rain · New York, NY

Full-timeRemote4mo ago

Application SecurityCI/CDCloud SecurityComplianceIncident ResponseLeadership

Cover Letter Connect

Prepare for this interview

Elite

AI-generated questions, company research, and talking points tailored to this role

About the role

Rain makes the next generation of payments possible across the globe. We're a lean and mighty team of passionate builders and veteran founders. Our infrastructure makes stablecoins usable in the real-world by powering card transactions, cross-border payments, B2B purchases, remittances, and more. We partner with fintechs, neobanks, and institutions to help them launch solutions that are global, inclusive, and efficient. You will have the opportunity to deliver massive impact at a hypergrowth company that is funded by some of the top investors in fintech, crypto, and SaaS, including Sapphire Ventures, Norwest, Galaxy Ventures, Lightspeed, Khosla, and several more. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk. Our Ethos We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company.

Requirements

4-8+ years of experience in security engineering, application security, offensive security, or secure software development; strong track record of securing modern applications

Hands-on experience with security tools such as Semgrep, Burp Suite, Snyk, Trivy, or similar for static, dynamic, and dependency security analysis

Solid understanding of web, API, and mobile security vulnerabilities (e.g., OWASP Top 10, API Top 10)

Experience driving or participating in threat modeling and secure design reviews

Familiarity with cloud concepts and securing cloud workloads

Collaborative mindset - you enjoy working closely with engineers to co-create practical security solutions

Practical understanding of SDLC and integrating security into development workflows

Ability to independently identify, prioritize, and drive remediation on critical findings

Experience balancing security risk with business and technical constraints

Nice to have, but not mandatory

Experience or exposure to runtime application protection (RASP) or advanced monitoring (e.g., eBPF-based tooling)

Experience with cloud security automation frameworks such as Security Hub remediations or DLP improvements

Security certifications like CISSP, CSSLP, OSCP, GWAPT, or similar

Familiarity with compliance frameworks like SOC 2, ISO 27001, OWASP SAMM and aligning controls

Prior experience in fintech, payments, or highly regulated environments

Exposure to API security tooling and design best practices

Things that enable a fulfilling, healthy, and happy experience at Rain:

Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take at least 10 days off.

Easy to access benefits 🧠For US Rainmakers, we offer comprehensive health, dental, and vision plans for you and your dependents, as well as a 100% company subsidized life insurance plan.

Retirement goals 💡Plan for the future with confidence. We offer a 401(k) with a 4% company match.

Equity plan 📦 We offer every Rainmaker an equity option plan so we can all benefit from our success.

Rain Cards 🌧️ We want Rainmakers to be knowledgeable about our core products and services. To support this mission, we issue a card for our team to use for testing.

Health and Wellness 📚 High performance begin

Security Engineer

About the role

Responsibilities

Requirements

Benefits

Your Match

Company Intel

What employees say

Interested in this role?