Platform Security Lead for Blockchain & Tokenized Assets

kraken.com; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Kraken is seeking an experienced security engineer to own security reviews and production code contributions for a platform issuing, holding, and settling tokenized assets across multiple networks. You will collaborate with security, compliance, and executives to translate audit findings into improvements.

The role involves hands-on development in TypeScript, security testing of web/app and on-chain components, and proactive threat modeling to strengthen custody and signing controls.

Qualifications

• Production code experience in TypeScript/Node.js
• Strong security skills across web apps, APIs, and cloud infrastructure
• Offensive security with pentesting or red-team work
• Applied cryptography, signatures, hashing, and key management
• Blockchain security for EVM and Solana; smart contract review
• Clear communicator able to explain risk and remediation tradeoffs

Responsibilities

• Coordinate smart contract audits and security due diligence requests
• Test web applications, APIs, backend services, and on-chain components; build repeatable tools for security testing
• Threat-model systems and review architecture, including key-management flows
• Review sensitive code involving authentication, cryptography, custody, signing, and funds movement
• Improve secrets management, access controls, dependency security, runtime protections, logging, and detection
• Assess transaction signing and custody controls, including signer permissions and emergency procedures
• Contribute TypeScript product work and support incident triage and post-incident reviews

Job description

Kraken is seeking an experienced security engineer to own security reviews and production code contributions for a platform issuing, holding, and settling tokenized assets across multiple networks. You will collaborate with security, compliance, and executives to translate audit findings into improvements.

The role involves hands-on development in TypeScript, security testing of web/app and on-chain components, and proactive threat modeling to strengthen custody and signing controls.