startale · Japan; Remote; Singapore
Skills: TypeScript, JavaScript, Rust
About the role We are seeking a hands-on Security Engineer who thrives in a startup environment. You'll work alongside product owners and engineers with the objective to secure the products in Startale's ecosystem. Products include a next-generation decentralized exchange with a fully on-chain order book (Strium), a user-facing application (StartaleApp) and a stablecoin (USDSC). This is a hands-on, technical role . You'll be the person who actively tests our systems, hunts for vulnerabilities, models threats against our products, and works with engineers to close the gaps — not the person who writes policies and generates reports. You'll report to the Security Lead and collaborate daily with Backend, Frontend, DevOps, and Blockchain engineering teams. Why this role Startale's products handle user funds and on-chain transactions so security work has tangible impact. Owning the security posture of a project at scale and complexity such as Strium is an opportunity for professional growth. You will have direct influence over how product security is built across the organization. Focus is on driving product security and not on maintaining compliance documentation. Our team is backed by and partnering with leading Japanese enterprises so you will have a chance to work in a stable and well-funded company but with the autonomy and speed of a small team. Key responsibilities Security Assessments & Penetration Testing : Conduct hands-on security testing of our applications, APIs, and infrastructure. Simulate real attack scenarios against our products. Find the vulnerabilities before external attackers or whitehat researchers do. Work with engineers to fix issues pragmatically. Threat Modeling : Build threat models for new services and features — especially Strium's trading engine, order book, and transaction flows. Identify attack surfaces, model adversary behavior, and define what needs to be hardened before launch. Vulnerability Triage & Remediation : Own the end-to-en …tru…
Sign in to see the original posting
Browse more developer jobs on RoleBurst