Senior App Security Engineer – FinTech/Web3, NYC Onsite

Hoodl2; Northern, New York (KY, NY); Hybrid; USD 200,000 - 235,000; Full time

Benefits offered by this job

Health insurance

401k match

Parental leave

Vacation

Commuter benefits

Lunches & snacks

Job summary

BitGo seeks a Senior Application Security Engineer to lead the technical execution of our product security strategy. You’ll secure fintech and blockchain-adjacent platforms by building end-to-end security programs integrated into the SDLC.

Architect secure AWS infrastructure with Terraform and Kubernetes, manage encryption and KMS, and oversee incident response, bug bounty, and pen tests in a high-growth environment.

Qualifications

• 8+ years in engineering and scaling end-to-end security programs.
• Experience securing FinTech, Web3, and digital asset ecosystems.
• Strong in distributed systems, microservices, Python/Java, and cloud hardening.
• Familiarity with SOC 2 Type II and GDPR controls.
• Experience with AI/ML lifecycle security and MLOps.

Responsibilities

• Lead threat modeling and security architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD pipelines (SAST/DAST).
• Architect secure AWS infrastructure using Terraform and Kubernetes.
• Design encryption services and KMS across distributed environments.
• Oversee incident response, bug bounty programs, and pentesting.
• Secure AI-enabled applications with input/output validation and guardrails.
• Proactively defend platform infrastructure against sophisticated threats.

Skills

Distributed systems

Microservices

Python

Java

Security engineering

Threat modeling

CI/CD security

Cloud security

Education

Bachelor's in CS/Engineering

Tools

Terraform

Kubernetes

AWS

Job description

BitGo seeks a Senior Application Security Engineer to lead the technical execution of our product security strategy. You’ll secure fintech and blockchain-adjacent platforms by building end-to-end security programs integrated into the SDLC.

Architect secure AWS infrastructure with Terraform and Kubernetes, manage encryption and KMS, and oversee incident response, bug bounty, and pen tests in a high-growth environment.