Senior AppSec Engineer: FinTech/Web3 Security Architect

TempoAtlas; Palo Alto, Northern (CA, KY); Hybrid; USD 200,000 - 235,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Parental leave

Paid vacation

Free meals & snacks

Equipment & workspace

Job summary

BitGo is seeking a Senior Application Security Engineer to lead the security program for high-growth FinTech and Web3 platforms. The role focuses on building end-to-end security programs and integrating automated security controls into the software development lifecycle.

The position is full-time and onsite at our Palo Alto office, with a strong emphasis on cloud security and incident response. Ideal candidates will have deep engineering background, experience defending complex cloud

Qualifications

• 8+ years of experience engineering and scaling end-to-end security programs.
• Proven background securing FinTech, Web3, and digital asset ecosystems.
• Strong engineering proficiency in distributed systems and microservices.

Responsibilities

• Lead threat modeling and security architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD using SAST, DAST, and vulnerability management.
• Architect secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.
• Design and deploy encryption services, KMS, and data-protection controls.
• Oversee security operations including bug bounty programs, IR workflows, and pentesting.
• Secure AI/ML lifecycles and guardrails for AI-enabled applications.
• Develop proactive defenses against sophisticated adversaries and threats.

Skills

Python

Java

Security strategy

Education

Bachelor’s degree in Computer Science, Engineering, or equivalent

Tools

Terraform

Kubernetes

AWS

Job description

BitGo is seeking a Senior Application Security Engineer to lead the security program for high-growth FinTech and Web3 platforms. The role focuses on building end-to-end security programs and integrating automated security controls into the software development lifecycle.

The position is full-time and onsite at our Palo Alto office, with a strong emphasis on cloud security and incident response. Ideal candidates will have deep engineering background, experience defending complex cloud