BUILDING THE FUTURE OF OPEN FINANCE Payward – the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks – has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions.
Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes.

- Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once.
- Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations.
- Review code for security. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events.
- Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures.
- Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending.
- Help with detection, triage, response, and post-mortems, and feed the lessons back into the program.





You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them.

- Robust application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails.
- You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it.
- You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each.
- Risk judgment. Experience commissioning or remediating third-party smart-contract audits.
- Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security.
- Cloud security depth in GCP or AWS, IAM, and container and runtime hardening.
- Detection engineering and security observability, including SIEM and log-based detections.
- Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.

Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don’t tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Follow us on Twitter
Connect on LinkedIn

📌 Senior Blockchain Security Engineer (India)
🏢 Kraken
📍 India