Product Security Engineer at Solflare

Zagreb, , Croatia -

Full Time

Start Date

Immediate

Expiry Date

03 Jun, 26

Salary

0.0

Posted On

05 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Product Security, Backend Services, Infrastructure Security, Deployment Pipelines, Threat Modeling, Security Reviews, Systemic Risk Reduction, Cloud Environments, Kubernetes, Containerized Workloads, Service-to-Service Communication, Secure API Design, Authentication, Authorization Models, Transport Security, Backend Development

Industry

Software Development

Description

Company Description About us Solflare is one of the fastest-growing crypto wallets in the world. With around 4 million monthly active users and over $20 billion in digital assets secured through our platform, we’re building a powerful gateway to Web3. Founded in 2021, Solflare now has a team of nearly 140 people, with offices in Zagreb, Belgrade, and Novi Sad, plus remote teams across the globe. Our vision is simple but bold: a world where everyone uses a Web3 wallet and has full control over their assets – achieving true financial independence. Our culture At Solflare, we’re on a mission to empower people to truly own and thrive – starting with our own team. We take on bold challenges with curiosity, grit, and a deep sense of accountability. Here, progress means learning fast, solving smart, and showing up for each other without ego. You’ll join a team where we question the status quo, celebrate shared wins, and never settle for “just good enough.” If you’re excited by growth – yours, ours, and society’s – you’ll feel right at home. Job Description The role As a Product Security Engineer at Solflare, you’ll own and shape product-level security across our backend services, infrastructure, and deployment pipelines. You’ll work closely with backend, infrastructure, and product teams to ensure security is embedded into how we design, build, and operate systems—rather than treated as an afterthought. This is a hands-on, engineering-driven security role. You’ll lead threat modeling and security reviews, identify systemic risks, and drive long-term improvements that raise the overall security bar of the product. Your work will directly influence architecture, development practices, and technical decision-making across the organization. If you’re pragmatic, calm under pressure, and motivated by preventing entire classes of security issues—not just fixing individual bugs—we'd love to meet you. Core responsibilities: Product security ownership: Own product-level security across backend services, infrastructure, and CI/CD pipelines, ensuring security is built into systems from design through operation. Threat modeling & reviews: Lead threat modeling and security reviews for new features, architectural changes, and major technical initiatives. Systemic risk reduction: Identify high-impact, systemic security risks and drive long-term, preventive solutions rather than one-off fixes. Embedded collaboration: Partner closely with backend, infrastructure, and product teams to embed security into everyday engineering workflows and design decisions. Security improvements: Translate findings from audits, reviews, and offensive security efforts into concrete architectural, tooling, and process improvements. Infrastructure & pipeline security: Improve the security posture of cloud environments, service-to-service communication, and CI/CD systems. Technical advisory: Act as a trusted security advisor during technical decision-making and system evolution, helping teams move fast without compromising security. Qualifications Requirements: Engineering background: Extensive hands-on experience as a backend or platform engineer, building and operating production systems. Backend development: Strong ability to read, write, and review production code across multiple backend languages and architectures. System design experience: Experience designing, implementing, and operating backend APIs, event-driven systems, and infrastructure components. Cloud & infrastructure security: Practical experience securing cloud environments, Kubernetes, containerized workloads, and service-to-service communication. Secure system design: Solid understanding of secure API design, authentication and authorization models, and transport security (TLS, certificates). Security mindset: Ability to reason about real-world attack surfaces, failure modes, and abuse scenarios in complex systems. Collaboration & communication: Clear, calm communicator who can collaborate across teams and influence engineering practices without blocking progress. End-to-end ownership: Full development lifecycle experience—from design and implementation to deployment and ongoing operation—with security embedded into day-to-day development. Additional Information Personality Traits We Value Problem-solvers: You see roadblocks as opportunities and don’t wait around for someone else to fix things. Self-starters: You take initiative, follow through, and deliver with pride – no excuses, no shortcuts. Team players: You thrive in a “we, not me” culture, lifting others up while sharing the load. Adaptable minds: You embrace change, question how things are done, and constantly look for better ways. Ownership mindset: You own your work end-to-end, communicate openly, and learn from every challenge. Why Solflare? Make an impact: Your work will directly shape how people interact with and understand crypto wallets, empowering users around the globe. Work with the best: Collaborate with a talented, driven team across design, engineering, and product to build innovative, user-first experiences. Flexibility: Remote or office – up to you. Enjoy a flexible work environment based on trust that supports your well-being and fosters creativity, as well as flexible work time – work when you are most productive, with no micromanagement. Perks & benefits: individual education budget, cool team buildings, private health insurance, to name a few. Learn about Crypto: No crypto experience? No problem! You’ll be part of a team that will teach you the ropes and help you grow into an expert. Join us at Solflare and be part of something bigger than yourself. We’re not just reacting to trends; we’re building the future. If you’re ready to push boundaries, challenge assumptions, and make an impact, we want to hear from you. Apply now and help us shape the future of decentralized finance. Department: Security

Responsibilities

The Product Security Engineer will own security across backend services, infrastructure, and CI/CD pipelines, embedding security into design, build, and operation processes. Core duties include leading threat modeling, identifying systemic risks, and driving long-term preventive security improvements.