Stark Bank is a Brazilian digital challenger bank founded in 2018, built to serve high-growth startups and enterprises with B2B financial services. The core infrastructure is an API platform that handles payment processing, receivables management, Pix transactions, corporate cards, and automated cash management routines. The technical stack sits at the intersection of fintech, data intelligence, and automation - domains where the attack surface is the product itself.
The threat model here is financial infrastructure at scale: API endpoints handling real money, transaction data in motion, and automated routines that execute without human review. That means the security team operates against fraud vectors, API abuse, and the operational risks of automating financial workflows for companies that move fast and expect zero friction. The platform's value proposition - eliminating bureaucratic overhead - creates direct tension with security controls, which is where the interesting engineering happens.
Stark Bank is headquartered in Brazil, operating within the country's financial regulatory framework and its real-time payment ecosystem (Pix). The company's culture signals lean toward technology-first thinking and operational efficiency, which in a fintech context typically means security is embedded into the development lifecycle rather than bolted on after. If you work here, you're securing an API-first bank where the product is the infrastructure and the clients are companies that have their own engineering teams with expectations to match.
