Senior App Security Engineer — FinTech & Web3

BitGo; Palo Alto (CA); On-site; USD 200,000 - 235,000; Full time

Benefits offered by this job

Competitive base salary

Bonus and equity

100% company paid health insurance

401k company match

Paid parental leave

Free meals and snacks

Job summary

BitGo, the leading digital asset security company in Palo Alto, seeks a Senior Application Security Engineer to drive the security program across FinTech and Web3 platforms. You will lead threat modeling, secure software development lifecycle integration, and cloud hardening in AWS with Terraform and Kubernetes.

Ideal candidates have deep engineering background in distributed systems, hands-on security controls, and experience with SOC 2 Type II and GDPR compliance, plus AI/ML security

Qualifications

• 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.

Responsibilities

• Lead threat modeling and product security architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD pipelines using SAST, DAST, and vulnerability management tools.
• Architect and implement secure-by-default AWS infrastructure using Terraform and Kubernetes.
• Design and deploy encryption services, KMS, and data protection controls across distributed environments.
• Oversee security initiatives including bug bounty programs, incident response, and pen-testing.
• Secure AI/ML lifecycles and guardrails for AI-enabled applications.
• Defend platform infrastructure against advanced threats and nation-state actors.

Skills

Python

Java

Distributed systems

Security engineering

AI/ML security

Education

Bachelor’s degree in Computer Science or Engineering

Tools

Terraform

Kubernetes

AWS

SAST/DAST tools

Job description

BitGo, the leading digital asset security company in Palo Alto, seeks a Senior Application Security Engineer to drive the security program across FinTech and Web3 platforms. You will lead threat modeling, secure software development lifecycle integration, and cloud hardening in AWS with Terraform and Kubernetes.

Ideal candidates have deep engineering background in distributed systems, hands-on security controls, and experience with SOC 2 Type II and GDPR compliance, plus AI/ML security