Staff Security Architect

Remote from: UK
Annual salary: Undisclosed
Salary information is not provided for this position. Check our Salary Directory to estimate the average compensation for similar roles.
Department: Software Engineering
Employment type: Full Time,
Job posted: 20 May 2026
Apply before: 20 Jun 2026
Experience level: Senior
Views / Applies: 47 / 14

About company

About Kraken

We put the power in your hands to buy, sell, and trade digital currency 🌏

Financial Services
2011

Actively Hiring

AI Summary

Kraken is seeking a Staff Security Architect to join their Security Labs team. This hands-on role involves designing and reviewing security architecture for a heterogeneous environment, conducting security assessments, and staying updated on blockchain security trends. The ideal candidate has proven experience in IT security, application security, and infrastructure security, with familiarity with frameworks like OWASP and NIST. Kraken is a fully remote company focused on accelerating global crypto adoption. This role offers an opportunity to work with a small, highly technical team on cutting-edge projects spanning cryptography, web3, Rust, and AI.

Job Complexity

Easy Hard

AI Insight The role requires deep technical expertise across multiple domains (application security, infrastructure, blockchain, cryptography, Rust, AI) and hands-on consulting with engineering teams, making it highly challenging. The senior level and need for proven experience in a fast-paced crypto environment further increase difficulty.

Salary Analysis

AI Insight The salary for this role is not explicitly provided, but based on market data for senior security architect positions at crypto companies, the median is estimated at $210,000. This is competitive for the role and location (US remote). The offered salary likely falls within the range of $150,000 to $280,000 depending on experience and equity.

Key Skills

Security Architecture Application Security Infrastructure Security Blockchain Security Cryptography Rust OWASP NIST Threat Modeling Penetration Testing

Cover Letter Sample

Dear Hiring Manager,

I am writing to express my strong interest in the Staff Security Architect position at Kraken. With over 10 years of experience in IT security and a deep specialization in application and infrastructure security, I am confident in my ability to contribute to Kraken Security Labs. My background includes hands-on security assessments, architecture reviews, and familiarity with frameworks like OWASP and NIST, aligning perfectly with the role's requirements.

I have extensive experience working with blockchain technologies and secure coding practices, including Rust and cryptography. I thrive in dynamic, remote environments and enjoy collaborating with cross-functional teams to design robust security solutions. At my previous role, I led the security architecture for a major crypto exchange, which involved threat modeling, penetration testing, and implementing secure design patterns.

I am excited about Kraken's mission to accelerate global crypto adoption and would be honored to bring my expertise to your team. Thank you for considering my application. I look forward to the opportunity to discuss how I can help secure Kraken's products and contribute to your innovative projects.

Sincerely, [Your Name]

Possible Interview Questions

Can you describe your experience with designing security architecture for a heterogeneous environment, and provide an example of a complex system you secured?

In my previous role at a fintech company, I designed a zero-trust architecture for a hybrid cloud environment spanning AWS and on-premises data centers. I implemented micro-segmentation, identity-aware proxies, and automated threat detection. This reduced the attack surface and ensured compliance with PCI DSS.

How do you stay updated with the latest blockchain security threats and mitigation techniques?

I regularly follow security research blogs like Trail of Bits and OpenZeppelin, participate in CTF competitions, and attend conferences like DEF CON and Devcon. I also contribute to open-source security tools for Ethereum smart contracts.

Describe a time when you had to convince a development team to implement a security measure they were resistant to. How did you handle it?

I worked with a team that was reluctant to adopt static analysis tools due to false positives. I ran a pilot showing how the tool caught critical vulnerabilities in their code, and then we collaboratively tuned the rules to reduce noise. This built trust and they eventually integrated it into their CI/CD pipeline.

Explain the OWASP Top 10 and how you would apply it to secure a web application. Provide an example of a vulnerability you've mitigated.

The OWASP Top 10 lists the most critical web application security risks. For example, I mitigated SQL injection by using parameterized queries and input validation. I also implemented Content Security Policy to prevent XSS attacks and used CSRF tokens to protect against cross-site request forgery.

What is your experience with Rust in security contexts? Can you discuss a project where you used Rust for security purposes?

I have used Rust to develop a secure cryptographic library for key management. Rust's memory safety guarantees eliminated common vulnerabilities like buffer overflows. I also contributed to a Rust-based blockchain node implementation, focusing on secure networking and consensus.

Building the Future of Crypto

Our Krakenites are a world-class team with crypto conviction, united by our desire to discover and unlock the potential of crypto and blockchain technology.

What makes us different?

Kraken is a mission-focused company rooted in crypto values. As a Krakenite, you’ll join us on our mission to accelerate the global adoption of crypto, so that everyone can achieve financial freedom and inclusion. For over a decade, Kraken’s focus on our mission and crypto ethos has attracted many of the most talented crypto experts in the world.

Before you apply, please read the Kraken Culture page to learn more about our internal culture, values, and mission. We also expect candidates to familiarize themselves with the Kraken app. Learn how to create a Kraken account here.

As a fully remote company, we have Krakenites in 70+ countries who speak over 50 languages. Krakenites are industry pioneers who develop premium crypto products for experienced traders, institutions, and newcomers to the space. Kraken is committed to industry-leading security, crypto education, and world-class client support through our products like Kraken Pro, Desktop, Wallet, and Kraken Futures.

Become a Krakenite and build the future of crypto!

Proof of work

The team

We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products.

We don’t merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work.

Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products.

You will work in a small, highly technical team and collaborate with teams all across the company & world.

The opportunity

Design, review & verify robust security architecture in a heterogeneous environment
Conduct thorough security assessments and audits of existing architectures, recommending practical improvements
Stay updated with latest (blockchain) security trends, threats and mitigation techniques
Provide expertise to our blockchain teams, ensuring secure operational practices

Skills you should HODL

Proven experience as an IT security expert, with a strong background in application security
Experience in security testing diverse application
Experience with infrastructure security
Basic familiarity with security frameworks (OWASP, NIST, etc)
Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment
Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization

Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.

Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.

We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

Kraken is powered by people from around the world and we celebrate all Krakenites for their diverse talents, backgrounds, contributions and unique perspectives. We hire strictly based on merit, meaning we seek out the candidates with the right abilities, knowledge, and skills considered the most suitable for the job. We encourage you to apply for roles where you don’t fully meet the listed requirements, especially if you’re passionate or knowledgable about crypto!

We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments are designed to evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Assessment results are considered alongside other relevant information, such as experience and interviews, and are not the sole basis for any employment decision.

As an equal opportunity employer, we don’t tolerate discrimination or harassment of any kind. Whether that’s based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status or any other protected characteristic as outlined by federal, state or local laws.

Stay in the know

Learn on the Kraken Blog

Connect on LinkedIn

Candidate Privacy Notice

Apply now >