About the Role
The Security Engineer is responsible for the security of VistralNova's applications, infrastructure, and internal practice — everything except the on-chain contract review our Smart Contract Auditor covers. That means authentication and session handling, API and access control, dependency and supply-chain risk, secret management, infrastructure hardening, and incident response. We handle player accounts, personal data from applicants, and systems adjacent to real value, so this is not an advisory role: you will find problems, fix them or get them fixed, and set the standards that prevent the next ones.
What You'll Do
- Review applications, APIs, and infrastructure for security weaknesses.
- Own authentication, authorisation, session handling, and access control design.
- Manage secrets, credentials, and key material, and remove them from where they should not be.
- Monitor dependency and supply-chain risk, and drive remediation.
- Build detection and alerting for suspicious activity.
- Lead incident response, including containment, disclosure, and follow-up.
- Set secure development standards and review the changes that matter most.
What We Look For
- Practical application and infrastructure security experience.
- Strong understanding of web vulnerability classes and how they occur in real code.
- Experience with cloud security, identity, and least-privilege access design.
- Ability to read code and find problems in it, not only run scanners.
- Sound judgment on risk and severity, so effort goes where the danger is.
- Calm, structured handling of incidents.
- Persuasive written communication — most security work is convincing other people.
Nice to Have
- Experience securing systems that handle payments, assets, or personal data at scale.
- Wallet security, key management, or account-abstraction experience.
- Detection engineering or security monitoring experience.
- Experience building a security function from nothing.
About VistralNova
VistralNova is a technology company building developer tools, game systems, AI-powered experiences, and digital infrastructure for modern interactive products. Our work brings together software engineering, game design, artificial intelligence, and asset-ready infrastructure to help teams create products that are practical, scalable, and easier to trust.
We are evolving toward a flexible technical foundation aligned with Polkadot and PVM-based architecture. Our team values clean architecture, practical execution, strong engineering standards, and long-term product quality.
