Senior AppSec Engineer — Cloud, AI Security, Onsite

TempoAtlas; Palo Alto, Northern (CA, KY); Hybrid; USD 200,000 - 235,000; Full time

Benefits offered by this job

Competitive compensation

Health insurance

401k match

Paid parental leave

Commuter/parking pass

Meals and snacks

Equipment and workspace

Job summary

BitGo, a leading digital asset security company, is seeking a Senior Application Security Engineer to lead comprehensive security programs across FinTech and Web3 platforms. The role emphasizes building end-to-end security, integrating automation into the SDLC, and defending cloud environments with a focus on AI-enabled applications.

The ideal candidate has extensive experience in distributed systems, Kubernetes, and AWS hardening, with SOC 2 Type II and GDPR know-how.

Qualifications

• 8+ years building security programs for high-growth startups.
• Experience securing FinTech/Web3/digital asset ecosystems.
• Proficient in Python or Java.
• Hands-on with container security, Kubernetes, and AWS hardening.
• Know-how on SOC 2 Type II and GDPR compliance.
• Expertise in AI/ML security lifecycles and MLOps.

Responsibilities

• Lead threat modeling and product security architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD using SAST/DAST and vulnerability management.
• Architect secure cloud infrastructure on AWS with Terraform and Kubernetes.
• Design and deploy encryption services, KMS, and data protection controls.
• Oversee bug bounty programs, incident response, and penetration testing.
• Secure AI-enabled applications with input/output validation and guardrails.
• Build proactive defenses for platform infrastructure against advanced threats.

Skills

Security program leadership

Distributed systems

Microservices

Python

Java

Education

Bachelor's degree in CS/Engineering

Tools

Terraform

Kubernetes

AWS

Security tooling (SAST/DAST)

Job description

BitGo, a leading digital asset security company, is seeking a Senior Application Security Engineer to lead comprehensive security programs across FinTech and Web3 platforms. The role emphasizes building end-to-end security, integrating automation into the SDLC, and defending cloud environments with a focus on AI-enabled applications.

The ideal candidate has extensive experience in distributed systems, Kubernetes, and AWS hardening, with SOC 2 Type II and GDPR know-how.