Rain
More roles at RainSecurity Engineer - AppSec
Remote. The employer does not say where candidates may be based.
Location not stated
Employer listed it 3 weeks ago · Added 3 weeks ago
Been open since 3 weeks ago, still being checked, but it has been live a while.
Salary
$200k to $260k per year
Location
Location not stated
Timezone
Not stated
Contract
Full-time
Experience
Mid
Category
Software
Published by the employer
What the advert says
Quoted word for word from the employer's advert. Where it says nothing, we say so.
- Working hours
- Not mentioned in the advert
- Where you can work from
Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world.
- Contract
- Not mentioned in the advert
- Experience asked for
- Not mentioned in the advert
- Pay
- Not mentioned in the advert
Remote flexibility
Undisclosed
The listing is advertised as remote but does not state which countries or regions candidates may work from.
Why this role is Undisclosed
We only label a role Work from anywhere, Region restricted or Work from home when the employer's own wording says so. We checked this advert under our current rules and found no country or region eligibility requirement in it. We don't guess, so it stays Undisclosed until the employer publishes enough location information. Here is exactly what the advert left out.
- Countries you can work from: Not stated. The advert only gives "Remote", which names no country you must live in.
- Whether the work is remote: Confirmed by the employer: "We support a flexible workplace – work from home, come into an office, or both."
- Working hours: Not stated. No timezone overlap or set hours are mentioned, so assume nothing either way.
Worth a look all the same. Missing wording is usually a rushed job posting rather than a closed door, so ask where you can be based in your first message, before you write a tailored application.
What the employer says
- Source listing states candidate location: "Remote"
What Nomaders makes of it
- No residency or region requirement found in the job description
- Check with the employer before assuming you can work from abroad
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
Before you apply
Questions worth asking: Nomaders interpretation
- The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.
Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.
About the role
About the Company
Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world.
You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk.
Our Ethos
We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company.
About the Team
Security Engineering is a small team that answers one question: was it built right? We run our own AI-driven red team against Rain's code and cloud, gate pull requests before they merge, and write the baselines that say how every system should be configured. Our blockchain work is covered. This role owns everything else: the backend services, APIs, cloud, and edge that move real money for real customers.
We work closely with Security Operations: we give them high-quality findings to coordinate fixes for, and clear configuration rules they can build detections on.
About the Team
Security Engineering makes sure Rain is built right. We run our own AI-driven red team against our code and cloud, gate pull requests before they merge, and set the baselines for how every system is configured. This role owns everything outside blockchain: the backend services, APIs, cloud, and edge that move real money. We give Security Operations high-quality findings to coordinate fixes for, and clear configuration rules to build detections on.
About the Role
You'll be Rain's application security expert and the quality bar for every non-chain finding we produce. The calls are yours: what's real, how bad it is, and what has to be fixed before launch. You'll hold the line with engineers when it matters, and make the case so they agree, not just comply.
What You'll Do
Review red team findings before they reach engineers: reproduce them, cut false positives, set severity, and write tickets clear enough to fix without a meeting. Improve the scoring that grades them
Harden our backend services and APIs, especially the money-moving paths. You'll often write the fix yourself
Own edge defenses: DDoS protection, rate limiting, WAF rules, and abuse controls
Write secure configuration baselines for our cloud, code, and SaaS, and turn them into automated checks
Grow our PR security gate so more bugs are blocked before merge
Own attack surface coverage, and run architecture reviews on new and high-risk systems
Find, test, and pick the best security tools, whether we buy, adopt, or build
What We're Looking For
4+ years in application security, product security, or security-minded backend engineering
You've owned security decisions. You can tell a senior engineer their design needs to change and keep a good working relationship
You can read an unfamiliar codebase (TypeScript/Node.js) and find the bug that matters, and you know a scary-sounding finding from a real one
Requirements
The employer hasn't listed requirements separately, they're described in the role summary above and on the original listing.
Benefits
No benefits package published with this listing. Ask about it at first interview.
How to apply
- 1Check the flexibility label above, undisclosed, matches where you plan to live and work.
- 2Tailor your CV to the role at Rain, mentioning your remote working experience.
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 23d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open software roles with comparable remote rules.
$200k to $260k per year · You'll be taken to the employer's careers page.