Senior DevSecOps Architect - FinTech & Web3 Security

Bitgo; Palo Alto (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Company-paid medical, dental, and vis​

Catered lunches, snacks, coffee

Caltrain passes

Stock options

401k plan

Flexible vacation time

Remote/hybrid friendly workspace

Top-end computer equipment

Job summary

Bitgo seeks a Senior Application Security Engineer to lead our product security program for FinTech and Web3 platforms. You will guide threat modeling, security reviews, and security automation integrated into the software development lifecycle.

You will architect secure AWS environments with Terraform and Kubernetes, design encryption and KMS solutions, and oversee incident response and penetration testing. Experience securing AI/ML lifecycles is highly valued.

Qualifications

• Deep engineering background defending complex cloud environments.
• Experience securing FinTech, Web3, and digital asset ecosystems.
• Practical knowledge implementing controls for SOC 2 Type II and GDPR.

Responsibilities

• Lead threat modeling and security architecture reviews with cross-functional teams.
• Integrate security automation into CI/CD using SAST/DAST and vulnerability management.
• Architect and implement secure AWS infrastructure using Terraform and Kubernetes.
• Design encryption services, key management systems, and data protection controls.
• Oversee bug bounty programs, incident response workflows, and penetration testing.
• Secure AI/ML lifecycles and establish LLM guardrails.
• Engineer defenses for cloud platform infrastructure against advanced threats.

Skills

Threat modeling

Security architecture

Security automation

SAST

DAST

Vulnerability management

AWS security

Terraform

Kubernetes

Encryption / KMS

Incident response

Penetration testing

AI/ML security

Distributed systems

Python/Java

Education

Bachelor’s degree in Computer Science / Engineering

Tools

Terraform

Kubernetes

AWS

Job description

Bitgo seeks a Senior Application Security Engineer to lead our product security program for FinTech and Web3 platforms. You will guide threat modeling, security reviews, and security automation integrated into the software development lifecycle.

You will architect secure AWS environments with Terraform and Kubernetes, design encryption and KMS solutions, and oversee incident response and penetration testing. Experience securing AI/ML lifecycles is highly valued.