Senior Security Engineer - xStocks
Payward, Inc. is the parent company and operating platform behind Kraken and a portfolio spanning trading, custody, payments, lending, tokenized assets, onchain finance, and benchmarks.
Funding history
Investors
Projects
About Payward, Inc.
Payward operates unified financial infrastructure across crypto and traditional markets, including shared liquidity, risk and margin systems, collateral and settlement, compliance, and licensing. Its first-party portfolio includes Kraken, Kraken Pro, NinjaTrader, Breakout, xStocks, Payward Services, CF Benchmarks, Reap, Krak, Kraken Prime, Kraken OTC, Kraken Custody, and Bitnomial.
Skills
About the Role
You will own security work from audits and questionnaires through remediation. You will pentest applications, APIs, services, and on-chain components; threat-model systems; review security-sensitive code; improve platform hardening; secure custody and signing workflows; contribute TypeScript engineering work; and support incident response.
Requirements
- Production software engineering experience with TypeScript and Node.js
- Application and infrastructure security fundamentals
- Offensive security experience in pentesting, vulnerability research, or red teaming
- Applied cryptography and blockchain security knowledge
- Knowledge of EVM and Solana security models
- Ability to read and assess smart contracts
- Risk assessment and remediation judgment
- Clear communication with engineers, auditors, and security leadership
Responsibilities
- Own security deliverables, audits, questionnaires, and remediation
- Pentest web applications, APIs, backend services, and on-chain components
- Build repeatable security-testing tooling
- Threat-model systems and review architecture and key-management flows
- Review code affecting authentication, cryptography, custody, signing, and fund movement
- Improve secrets handling, IAM, supply-chain hygiene, detection, and logging
- Secure transaction signing, MPC, HSM, permissions, and approval workflows
- Contribute TypeScript product-engineering work
- Support incident detection, triage, response, and post-mortems
Hiring Process
Job-related skills or work-style assessment may be requested; results are considered alongside experience and interviews.
