Senior Security Application Engineer

Lead the technical execution of BitGo's product security strategy by building end-to-end security programs, integrating automated controls into the software development lifecycle, securing cloud infrastructure, and protecting AI-integrated applications.

Responsibilities

• Lead threat modeling and product security architecture reviews.
• Integrate SAST, DAST, and vulnerability management into CI/CD pipelines.
• Architect secure AWS infrastructure using Terraform and Kubernetes.
• Design encryption services, key management systems, and data protection controls.
• Oversee bug bounty programs, incident response, and penetration testing.
• Establish validation protocols and LLM guardrails for AI-integrated applications.
• Engineer defenses against sophisticated and nation-state-level threats.

Requirements

• 8+ years of experience engineering and scaling security programs for high-growth startups.
• Experience securing FinTech, Web3, and digital asset platforms.
• Proficiency in distributed systems, microservices, Python, or Java.
• Expertise in container security, Kubernetes, and AWS hardening.
• Knowledge of SOC 2 Type II and GDPR controls.
• Expertise in AI/ML security, MLOps, and agentic AI platforms.
• Bachelor's degree in Computer Science, Engineering, or an equivalent technical field.

Benefits

• 100% company-paid health insurance for employee, partner, and dependents
• Up to 4% 401k company match
• Paid parental leave
• Paid vacation
• Free commuter and parking pass
• Free custom lunches, dinners, and snacks
• Computer equipment and workplace furniture
• Stock options