Senior App Security Engineer: FinTech & AI (Onsite NYC)

BitGo, Inc.; Northern, New York (KY, NY); Hybrid; USD 200,000 - 235,000; Full time

Benefits offered by this job

Health insurance

Equity/stock options

Bonus program

Job summary

BitGo, Inc. in New York City is seeking a Senior Application Security Engineer to lead the technical execution of our product security strategy.

This role focuses on securing high-growth FinTech and Web3 digital asset platforms by building end-to-end security programs and integrating automated security controls directly into the software development lifecycle. The ideal candidate has a deep engineering background and hands-on experience defending complex cloud environments.

Qualifications

• 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
• Proven background securing FinTech, Web3 and digital asset ecosystems.
• Strong engineering in distributed systems and microservices.

Responsibilities

• Lead threat modeling and security reviews with cross-functional teams.
• Integrate security automation into CI/CD pipelines using SAST/DAST.
• Architect secure AWS infrastructure with Terraform and Kubernetes.
• Implement encryption, KMS and data protection across distributed environments.
• Oversee bug bounty programs, incident response, and periodic pentests.
• Secure AI/ML lifecycles and guardrails for AI-enabled apps.
• Defend platform infrastructure against advanced threats.

Skills

8+ years experience

FinTech security

Web3 security

Python

Java

Kubernetes

AWS

SOC 2 Type II

GDPR

AI/ML security

Education

Bachelor’s degree in CS/Engineering

Tools

Terraform

Kubernetes

AWS

CI/CD tooling

SAST/DAST tools

Job description

BitGo, Inc. in New York City is seeking a Senior Application Security Engineer to lead the technical execution of our product security strategy.

This role focuses on securing high-growth FinTech and Web3 digital asset platforms by building end-to-end security programs and integrating automated security controls directly into the software development lifecycle. The ideal candidate has a deep engineering background and hands-on experience defending complex cloud environments.