Senior Security Engineer - Open Finance & Blockchain Security

Kraken; Polska; Hybrid; PLN 180,000 - 300,000; Full time

Job summary

Kraken is building the future of open finance through Payward and a suite of crypto platforms. We seek an engineer-led security professional who can own security end to end, perform proactive offensive testing, and drive risk-based remediation across on-chain and off-chain components.

You will work with TypeScript/Node.js in a security-focused role, assess architecture, and tighten controls from audits to incident response.

Qualifications

• Production code experience in TypeScript and Node.js.
• Strong OWASP and application security fundamentals.
• Real offensive security work in pentesting, vuln research, or red-team.
• Applied cryptography and blockchain security knowledge.
• Ability to own security items from audit to remediation.

Responsibilities

• Own security deliverables end to end, coordinate audits and respond to due-diligence requests.
• Pen test web apps, APIs, backends, and on-chain components; build repeatable tooling.
• Threat-model new and existing systems; review architecture and key-management flows.
• Review code for security on auth, crypto, custody, signing, and funds movement.
• Harden platform with secrets handling, IAM, least-privilege, and supply-chain hygiene.
• Secure custody and signing workflows; review MPC, HSM integrations, signer permissions, admin roles.
• Contribute to product engineering with TypeScript work and backlog tasks.
• Support incidents: detection, triage, response, post-mortems.

Skills

Code review

Pentesting

Application security

Cryptography

Blockchain security

Ownership

Communication

Automation

Tools

TypeScript

Node.js

Security tooling

Job description

Kraken is building the future of open finance through Payward and a suite of crypto platforms. We seek an engineer-led security professional who can own security end to end, perform proactive offensive testing, and drive risk-based remediation across on-chain and off-chain components.

You will work with TypeScript/Node.js in a security-focused role, assess architecture, and tighten controls from audits to incident response.