Security Engineer

About DexTrending

We sell fixed blocks of time on the Dexscreener trending list. A customer picks twelve or twenty-four hours on Solana or one of six EVM chains, pays once in USDC, pastes a contract address, and the window opens. Behind that is a campaign engine that drives real on-chain volume, transaction count and wallet diversity across the whole window — because those are the three things the board measures, and a bot loop fails all three.

The team is small and remote. Everyone here owns something end to end.

The role

You would own key custody end to end: how deposit keys are generated and stored, how campaign wallets are funded and rotated, what is allowed to touch a signing path, and what the recovery story looks like if a host is compromised.

Beyond custody, you would own the review of anything that moves money or authenticates a user. That includes the payment matching logic, the deposit crediting path, the wallet sign-in flow, and the API key model. Some of these were built quickly and deserve a hard second look — we would rather you find the problems than a customer does.

This is a hands-on role. You would write the fixes as well as the findings.

You will be a fit if

• Practical key management experience: HSMs, KMS, or a well-reasoned argument for something else
• Application security depth, particularly authentication, session handling and replay protection
• Able to read a payment flow and identify where a double-credit or a cross-credit becomes possible
• Comfortable working in a codebase you did not write and disagreeing with its decisions constructively

Bonus points

• Smart contract audit background, even if this role is mostly off-chain
• Experience with threat modelling in a small team, where the answer cannot be another process
• Having designed a rotation scheme that survived contact with operations

Compensation

$135k–$185k per year, paid monthly in USD or USDC, whichever you prefer. The range is real: where you land in it depends on experience, and we will tell you which end we are thinking of before the final conversation rather than after.

Location and hours

Fully remote, anywhere. There is no core-hours requirement, but campaigns run continuously and someone has to be reachable when one misbehaves — on-call is shared and compensated, never assumed.

Process

1. Email us. A CV, a repository, or a piece of writing — whatever makes the case.
2. A conversation. Forty-five minutes, two of us, no panel.
3. A technical session. Ninety minutes on a real problem from our backlog, worked through together. Never unpaid homework.
4. Decision. Within three working days, with the reasoning either way.

How to apply

Write to careers@dextrending.net with Security Engineer in the subject line. Tell us what you would want to own in the first three months. That single paragraph tells us more than a cover letter does.

Posted 4 August 2026 · open until 4 December 2026.