Senior App Security Engineer - Onsite NYC (FinTech)

Hood L2; New York (NY); Hybrid; USD 200,000 - 235,000; Full time

Benefits offered by this job

Health insurance

401(k) company match

Paid parental leave

Paid vacation

Stock options

Free commuter/parking pass

Free meals and snacks

Equipment and workspace setup

Job summary

BitGo seeks a Senior Application Security Engineer to lead security program execution for fintech and Web3 platforms. You will partner with cross-functional teams to model threats, weave security into CI/CD, and harden AWS/Kubernetes environments.

You’ll design encryption and key management, manage incident response, and defend AI-enabled services. Ideal candidates have 8+ years building scalable security programs, hands-on cloud security, and experience with SOC 2 Type II and GDPR.

Qualifications

• 8+ years building and scaling end-to-end security programs for high-growth startups.
• Experience securing FinTech, Web3 or digital asset ecosystems.
• Hands-on with container security, Kubernetes, and AWS hardening.
• Knowledge of SOC 2 Type II and GDPR controls.
• Security in AI/ML lifecycles and MLOps frameworks.
• Bachelor’s degree in CS/Engineering or equivalent.

Responsibilities

• Lead threat modeling and security architecture reviews with cross-functional teams.
• Integrate security tooling into CI/CD with SAST/DAST and vulnerability mgmt.
• Build secure-by-default AWS infrastructure using Terraform and Kubernetes.
• Deploy encryption services, KMS, and data-protection controls across environments.
• Oversee incident response, bug bounties, and penetration testing programs.
• Secure AI-enabled applications with input/output validation and guardrails.
• Engineer defenses against advanced threats targeting the platform.

Skills

Python

Java

Distributed systems

Security engineering

Cloud security

LLM/AI security

Education

Bachelor's degree in Computer Science, Engineering, or equivalent

Tools

Kubernetes

Terraform

AWS

Job description

BitGo seeks a Senior Application Security Engineer to lead security program execution for fintech and Web3 platforms. You will partner with cross-functional teams to model threats, weave security into CI/CD, and harden AWS/Kubernetes environments.

You’ll design encryption and key management, manage incident response, and defend AI-enabled services. Ideal candidates have 8+ years building scalable security programs, hands-on cloud security, and experience with SOC 2 Type II and GDPR.