Senior Application Security Engineer — FinTech & Web3 Cloud

TempoAtlas; New York (NY); On-site; USD 200,000 - 235,000; Full time

Benefits offered by this job

Health insurance

401k match

Parental leave

Free meals and snacks

Commuter benefits

Job summary

BitGo, a leader in digital asset infrastructure, seeks a Senior Application Security Engineer to drive end-to-end security in FinTech and Web3 platforms. You will champion secure-by-default cloud architecture, encryption, and threat modeling in a fast-paced, high-growth environment.

You will integrate security into CI/CD, manage vulnerabilities, and oversee incident response, bug bounty, and penetration testing engagements.

Qualifications

• 8+ years building end-to-end security programs for high-growth apps.
• Experience securing FinTech/Web3/digital asset platforms.
• Strong in distributed systems, microservices, Python/Java.
• Hands-on with container security and AWS hardening.
• Knowledge of SOC 2 Type II and GDPR controls.
• Experience securing AI/ML lifecycles.

Responsibilities

• Lead threat modeling and security reviews with cross-functional teams.
• Integrate security into CI/CD with SAST/DAST and vulnerability management.
• Architect secure AWS cloud infra with Terraform and Kubernetes.
• Design encryption and KMS controls across distributed environments.
• Oversee bug bounty, incident response, and regular pentesting.
• Secure AI/ML lifecycles and guardrails.

Skills

Distributed systems

Microservices

Python

Java

Threat modeling

CI/CD security

Vulnerability management

AI/ML security

Education

Bachelor's degree in CS/Engineering

Tools

Terraform

Kubernetes

AWS

SAST/DAST

Job description

BitGo, a leader in digital asset infrastructure, seeks a Senior Application Security Engineer to drive end-to-end security in FinTech and Web3 platforms. You will champion secure-by-default cloud architecture, encryption, and threat modeling in a fast-paced, high-growth environment.

You will integrate security into CI/CD, manage vulnerabilities, and oversee incident response, bug bounty, and penetration testing engagements.