AppSec Engineer — Backend, API & Cloud Defense

Rain; New York (NY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Unlimited time off

Flexible working

Health coverage

401(k)

Equity plan

Wellness stipend

Meal allowance

Team summits

Job summary

Rain is seeking an application security expert to own the non-blockchain security surface and drive the quality bar across backend services, APIs, cloud, and edge that move real money. You’ll partner with engineers to assess risk, define fixes, and improve security gates before launch, leveraging AI tools and strong collaboration.

We value hands-on cloud security (prefer GCP), Terraform, and edge defenses like WAFs and rate limiting, plus experience with threat modeling and architecture reviews

Qualifications

• 4+ years in application security, product security, or security-minded backend engineering.
• You’ve owned security decisions and can influence senior engineers.
• You can read an unfamiliar codebase (TypeScript/Node.js) and spot critical bugs.
• Hands-on cloud security with Terraform and edge defenses like WAFs and rate limiting.

Responsibilities

• Review red team findings, reproduce and triage, fix with minimal meetings.
• Harden backend services and APIs, especially money-moving paths.
• Own edge defenses, including DDoS protection and security rules.
• Write secure configuration baselines for cloud, code, and SaaS.

Skills

Application security

Security decisions

Codebase reading

AI tooling

Tools

GCP

Terraform

WAF

Rate limiting

Job description

Rain is seeking an application security expert to own the non-blockchain security surface and drive the quality bar across backend services, APIs, cloud, and edge that move real money. You’ll partner with engineers to assess risk, define fixes, and improve security gates before launch, leveraging AI tools and strong collaboration.

We value hands-on cloud security (prefer GCP), Terraform, and edge defenses like WAFs and rate limiting, plus experience with threat modeling and architecture reviews