Security Engineer (Fully Remote)

Bastion; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Bastion is seeking a security-focused engineer to work on Go-based security features within a cloud-native stack. You will own a security domain end to end, from design feedback to shipping fixes or detections, in an AWS/Kubernetes environment.

You will drive multi-quarter initiatives like default-deny networking and compliance evidence automation, contributing to audits and service-team hardening.

Qualifications

• Proficient Go developer with security mindset.
• Experience securing cloud-native workloads (AWS).
• Knowledge of Kubernetes security best practices.

Responsibilities

• Own a security domain end to end (e.g., cloud hardening or detection engineering).
• Contribute security feedback to design docs and ship fixes or detections.
• Drive multi-quarter initiatives like default-deny networking and audits readiness.

Skills

Go programming

Cloud security

Kubernetes security

Security feedback

Tools

AWS

Kubernetes

SIEM

Job description

• Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
• Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
• Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.