[Hiring] Product Security Engineer @Startale Group

Role Description

We are seeking a hands-on Security Engineer who thrives in a startup environment. You'll work alongside product owners and engineers with the objective to secure the products in Startale's ecosystem. Products include:

• A next-generation decentralized exchange with a fully on-chain order book (Strium)
• A user-facing application (StartaleApp)
• A stablecoin (USDSC)

This is a hands-on, technical role. You'll be the person who actively tests our systems, hunts for vulnerabilities, models threats against our products, and works with engineers to close the gaps — not the person who writes policies and generates reports. You'll report to the Security Lead and collaborate daily with Backend, Frontend, DevOps, and Blockchain engineering teams.

Qualifications

• 5+ years of hands-on experience with a focus on application security, penetration testing, or product security.
• Demonstrated ability to find vulnerabilities — through manual testing, architecture and/or code review, or creative attack simulation.
• Practical experience with exchange or trading platform security — from a DEX (preferred) or DeFi protocol.
• Scripting and automation ability — you write tools and automate to scale security across the stack.
• Experience triaging vulnerabilities and writing clear, actionable remediation guidance for developers.
• Strong written communication in English.

Requirements

• Experience with cloud infrastructure security — least-privilege enforcement, network security, secrets management.
• Experience with container security — network policies, RBAC, pod security standards, image scanning, Dockerfile hardening, base image management.
• Ability to read and review code in at least one of: TypeScript/JavaScript, Solidity, Rust.
• Understanding of software supply chain security, including dependency risks, build integrity, and methods for tracking what components are included in shipped software.
• Experience managing or participating in a bug bounty program (e.g. Immunefi, HackerOne).

Benefits

• Opportunity for professional growth by owning the security posture of a project at scale and complexity.
• Direct influence over how product security is built across the organization.
• Stable and well-funded company with the autonomy and speed of a small team.

Company Description

Startale's products handle user funds and on-chain transactions, so security work has tangible impact.