Senior App Security Engineer - NYC Onsite

BitGo, Inc.; New York (NY); On-site; USD 200,000 - 235,000; Full time

Benefits offered by this job

Equity

Health insurance

401k match

Parental leave

Paid vacation

Commuter/parking

Free meals

Equipment provided

Job summary

BitGo, Inc. in New York City is looking for a Senior Application Security Engineer to lead the security program across our digital asset platforms.

You will own threat modeling, secure software development lifecycle integrations, and cloud security architectures in AWS with Terraform and Kubernetes. The role requires 8+ years in security, hands-on experience with container security and modern crypto workflows, and a strong background in SOC 2 Type II and GDPR compliance.

Qualifications

• 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
• Proven background securing FinTech, Web3, and digital asset ecosystems.
• Strong programming in Python or Java; experience with distributed systems.
• Hands-on expertise in container security, Kubernetes, and AWS infrastructure hardening.
• Experience implementing SOC 2 Type II and GDPR compliance.
• Expertise securing AI/ML lifecycles and MLOps.

Responsibilities

• Lead threat modeling and product security architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD pipelines using SAST and DAST.
• Architect and implement secure-by-default AWS infrastructure using Terraform and Kubernetes.
• Design and deploy encryption services, key management systems (KMS), and data protection controls.
• Oversee security programs including bug bounty, incident response, and periodic pentesting.
• Secure AI-enabled apps by establishing input/output validation and guardrails for LLMs.
• Build proactive defenses against advanced threats targeting platform infrastructure.

Skills

Python

Java

Distributed systems

Microservices

Container security

Kubernetes

AWS hardening

SOC 2 / GDPR

AI/ML security

Education

Bachelor's degree in CS/Engineering

Tools

Terraform

Cloud security tooling

Job description

BitGo, Inc. in New York City is looking for a Senior Application Security Engineer to lead the security program across our digital asset platforms.

You will own threat modeling, secure software development lifecycle integrations, and cloud security architectures in AWS with Terraform and Kubernetes. The role requires 8+ years in security, hands-on experience with container security and modern crypto workflows, and a strong background in SOC 2 Type II and GDPR compliance.