---
title: 'Security Engineer - AppSec at Rain'
canonical: 'https://feeny.ai/job/security-engineer-appsec-rain-remote-scy9bdx23480'
type: 'job'
last_seen: '2026-10-18'
---

# Security Engineer - AppSec at Rain

- **Company:** Rain
- **Location:** Remote
- **Compensation:** $200k–$260k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-10-05
- **Last confirmed live:** 2026-10-18
- **Apply:** https://jobs.ashbyhq.com/rain/7e211b55-5069-45b2-8072-c6555a5b53cd

## Job description

## About the Company

Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world. You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk.

Our Ethos We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company.

## About the Team

Security Engineering is a small team that answers one question: was it built right? We run our own AI-driven red team against Rain's code and cloud, gate pull requests before they merge, and write the baselines that say how every system should be configured. Our blockchain work is covered. This role owns everything else: the backend services, APIs, cloud, and edge that move real money for real customers. We work closely with Security Operations: we give them high-quality findings to coordinate fixes for, and clear configuration rules they can build detections on.

## About the Team

Security Engineering makes sure Rain is built right. We run our own AI-driven red team against our code and cloud, gate pull requests before they merge, and set the baselines for how every system is configured. This role owns everything outside blockchain: the backend services, APIs, cloud, and edge that move real money. We give Security Operations high-quality findings to coordinate fixes for, and clear configuration rules to build detections on.

## About the Role

You'll be Rain's application security expert and the quality bar for every non-chain finding we produce. The calls are yours: what's real, how bad it is, and what has to be fixed before launch. You'll hold the line with engineers when it matters, and make the case so they agree, not just comply.

## What You'll Do

- Review red team findings before they reach engineers: reproduce them, cut false positives, set severity, and write tickets clear enough to fix without a meeting. Improve the scoring that grades them
- Harden our backend services and APIs, especially the money-moving paths. You'll often write the fix yourself
- Own edge defenses: DDoS protection, rate limiting, WAF rules, and abuse controls
- Write secure configuration baselines for our cloud, code, and SaaS, and turn them into automated checks
- Grow our PR security gate so more bugs are blocked before merge
- Own attack surface coverage, and run architecture reviews on new and high-risk systems
- Find, test, and pick the best security tools, whether we buy, adopt, or build

## What We're Looking For

- 4+ years in application security, product security, or security-minded backend engineering
- You've owned security decisions. You can tell a senior engineer their design needs to change and keep a good working relationship
- You can read an unfamiliar codebase (TypeScript/Node.js) and find the bug that matters, and you know a scary-sounding finding from a real one
- Hands-on cloud security (ideally GCP), Terraform, and edge defenses like WAFs and rate limiting
- Experience with threat models or architecture reviews. You've run tool bake-offs and dropped tools that didn't earn their cost
- You'd rather ship a check than write a document, and you use AI tools heavily without trusting them blindly

Bonus Attributes

- Fintech, payments, or card issuing background (PCI DSS a plus)
- Pentest, bug bounty, or red team experience
- Experience building security scanners, static analysis rules, or LLM-based review tools
- If you have the background: AI security for our agents and agentic payments, or corporate security alongside IT

Things that enable a fulfilling, healthy and happy experience at Rain: Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace. Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan. Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success. Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit. Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.

## About Rain

## Core Business
- **Primary industries**: Financial Services, Payments, Stablecoin Infrastructure
- **Target customers**: B2B – enterprises, fintechs, platforms, and institutions needing compliant card programs and cross-border payment rails
- **Mission**: Build the infrastructure that turns stablecoins into usable financial products, enabling tokenized money to move at internet speed while delivering familiar user experiences

## Products & Services
- **Cards**: Launch prepaid or credit card programs (virtual and physical) powered by stablecoin infrastructure, accepted at 175M+ merchant locations worldwide. Includes scoped virtual cards for agentic payments.
- **Wallets**: Store stablecoins with flexible, secure setups; offer branded wallet-in-a-box for digital dollar access in underbanked regions.
- **Money Movement**: Send and receive fiat and stablecoin payments globally, with daily onchain settlement to card networks.
- **Accounts**: Virtual accounts with static routing details to send and receive funds.
- **Onramps/Offramps**: Convert fiat into stablecoins and stablecoins into local currency.
- **Rewards**: Card-native rewards programs that drive usage and revenue.
- **Agent Control Layer**: Guardrails for controlled agentic payments, allowing agents to spend and move money safely.

## Market Standing
- **Valuation**: $1.95 billion (as of Series C, January 2026)
- **Key Metric**: Total funding of $338M+ (Series C: $250M led by ICONIQ Capital, January 2026)
- **Notable Investors/Partners**: ICONIQ Capital, Lightspeed Venture Partners, Norwest Venture Partners, Sapphire Ventures, Dragonfly, Galaxy, Khosla Ventures, Coinbase Ventures, Circle Ventures, Uniswap, FirstMark, Vinyl, Thayer, BDMI, CompoSecure, Canonical Crypto, Hard Yaka, Samsung Next, Goldcrest Capital, Endeavor Catalyst, Mischief. Mastercard Principal Member and Visa Principal Member.
- **Growth Signals**: 107 employees (+421% YoY); operates in 12 countries; trusted by hundreds of partners moving billions in transaction volume annually; became a Mastercard Principal Member in 2026; launched Agent Control Layer.

## Competitive Advantages
- **Stablecoin-native by design**: Built from the ground up for onchain money movement, not legacy rails with crypto added later.
- **Daily onchain settlement**: Settles card transactions with networks daily using stablecoins, improving capital efficiency and speed.
- **Principal membership with Visa and Mastercard**: Direct issuing without intermediaries, enabling global acceptance and compliance.
- **Unified API**: Combines accounts, cards, ramps, rewards, and money movement in one platform, reducing vendor fragmentation.
- **Full-stack compliance**: Compliance, risk, and program operations built into the platform with hands-on support from design through launch.

## Strategic Focus
- **Geographic expansion**: Scaling stablecoin payment infrastructure to APAC and beyond, with existing presence in US, LATAM, EU, and EMEA.
- **Agentic payments**: Enabling controlled, autonomous spending through the Agent Control Layer for AI agents and automated workflows.
- **Deepening enterprise adoption**: Winning large institutions and platforms by offering a complete, compliant stablecoin payments stack.
- **Growing card programs**: Expanding prepaid and credit card issuance for global HNWIs, cross-border B2B payments, and branded wallet-in-a-box solutions.

## Why Work Here
- **Culture**: “Rainmakers” are described as bold builders shaping how money moves for the next generation. Emphasis on high performance, intentional investment in team, and long-term mindset.
- **Work model**: Hybrid setup with a Flatiron office (NYC) for local teammates; flexible remote options for other locations.
- **Perks**: Equity ownership for every team member; $1,000 home office stipend; $350/month wellness support (fitness, therapy, personal well-being); 95% of medical, dental, and vision premiums covered; unlimited PTO; 401(k) with matching; regular team events, offsites, and dinners.
- **Engineering culture**: Strong technical team (33% of staff in technical roles), modern stack (EVM, fullstack, Android), and opportunities to work on cutting-edge stablecoin infrastructure.

## Sources
1. [rain.xyz/careers](https://www.rain.xyz/careers)
2. [rain.xyz/](https://www.rain.xyz/)
3. [rain.xyz/about-us](https://www.rain.xyz/about-us)
4. [linkedin.com/company/rainxyz](https://www.linkedin.com/company/rainxyz)
5. [rain.xyz/media-kit](https://www.rain.xyz/media-kit)

## Other roles at Rain

- [Senior Product Manager - Agentic Payments](https://feeny.ai/job/senior-product-manager-agentic-payments-rain-new-york-v5r9ctefncgx) — New York, NY
- [Senior Product Manager - Compliance](https://feeny.ai/job/senior-product-manager-compliance-rain-new-york-4xbq7mn0yzgt) — New York, NY
- [Market Expansion Manager](https://feeny.ai/job/market-expansion-manager-rain-new-york-e1szc73gten3) — New York, NY
- [Financial Partnerships Manager](https://feeny.ai/job/financial-partnerships-manager-rain-new-york-0wp2mywp5y8n) — New York, NY
- [Site Reliability Engineer](https://feeny.ai/job/site-reliability-engineer-rain-remote-0qhjgng5w2sj)
- [Compliance Associate - Bank Sponsorship & Product Expansion](https://feeny.ai/job/compliance-associate-bank-sponsorship-product-expansion-rain-new-york-8aq48vxjvpwb) — New York, NY
- [Senior Accountant](https://feeny.ai/job/senior-accountant-rain-new-york-gn4jn4ngnszy) — New York, NY
- [Director of Business Development & Strategy, Branded Payments](https://feeny.ai/job/director-of-business-development-strategy-branded-payments-rain-new-york-3293brz05fbg) — New York, NY
- [Software Engineer - Wallets](https://feeny.ai/job/software-engineer-wallets-rain-remote-xpj24q4esfvp)
- [VP of Engineering](https://feeny.ai/job/vp-of-engineering-rain-new-york-f56ph2khh61h) — New York, NY