Senior Application Security Engineer - FinTech & AI

BitGo; New York (NY); On-site; USD 200,000 - 235,000; Full time

Benefits offered by this job

Competitive base salary

Stock options

Health insurance

401k company match

Parental leave

Paid vacation

Free commuter/parking pass

Lunches and snacks

Equipment provided

Job summary

BitGo is seeking a Senior Application Security Engineer to lead the security program across its FinTech and Web3 platforms. You will drive threat modeling, secure-by-default cloud design on AWS using Terraform and Kubernetes, and responsible data protection controls in distributed environments.

The role emphasizes automated security within the SDLC, incident response, penetration testing, and securing AI/ML lifecycles.

Qualifications

• 8+ years building security programs for FinTech/scaleups.
• Experience securing FinTech/Web3 platforms.
• Bachelor’s degree in CS or related field.

Responsibilities

• Lead threat modeling and architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD pipelines with SAST/DAST.
• Architect secure AWS infrastructure using Terraform and Kubernetes.
• Design encryption, KMS, and data protection across distributed environments.
• Oversee bug bounty programs, incident response, and pen tests.
• Secure AI-enabled applications with input/output validation and guardrails.
• Protect platform infrastructure from sophisticated threats.

Skills

Threat modeling

Security architecture

CI/CD security

Kubernetes security

AWS security

Python/Java

SOC 2 compliance

GDPR compliance

AI/ML security

Education

Bachelor’s degree in Computer Science

Tools

Terraform

Kubernetes

AWS IAM

SAST/DAST tools

Job description

BitGo is seeking a Senior Application Security Engineer to lead the security program across its FinTech and Web3 platforms. You will drive threat modeling, secure-by-default cloud design on AWS using Terraform and Kubernetes, and responsible data protection controls in distributed environments.

The role emphasizes automated security within the SDLC, incident response, penetration testing, and securing AI/ML lifecycles.