Senior Go Security Engineer — Remote US, Cloud & K8s

PromptCube; New York (NY); Remote; USD 180,000 - 250,000; Full time

Job summary

Bastion is looking for a hands-on Senior Security Engineer to join as the second member of the security team. You will write production Go code, delve into AWS/EKS, and build security tooling to scale a comprehensive security program across engineering, product, and regulatory workstreams.

Expect to own a security domain and contribute to detections, telemetry, and guardrails while supporting on-call incident response and external audits.

Qualifications

• Must be able to write production code; the platform and security services are written in Go.
• Hands‑on practitioner willing to get into the codebase, AWS/Kubernetes environment, SIEM, and security services from week one.
• Comfortable with the fast pace and changing specific work of a startup, and able to be fully productive by the third month.
• Willing to participate in a security on‑call rotation.

Responsibilities

• Write production Go code, review design docs, and build security tooling and middleware that engineers can easily drop into any service.
• Get hands-on with the Go codebase, AWS/Kubernetes (EKS) environment, SIEM, and existing security services, and ship a first security fix, guardrail, or detection to production within the first month.
• Own at least one security domain end to end, such as Kubernetes and cloud hardening, application security in CI, or detection engineering.
• Write and tune detections as code, add new telemetry sources, and reduce alert noise across cloud, Kubernetes, identity, endpoint, and SaaS telemetry.
• Ship reusable security libraries or middleware in Go (for example authorization, tenant isolation, request signing, or input validation) and get them adopted by at least one service team.
• Serve as security reviewer on design docs for new product features and architecture changes, and deliver control automation and evidence for active audit or regulatory workstreams (SOC 1, SOC 2, OCC, MiCA/DORA).
• Help launch and triage the bug bounty program and grow DLP coverage and policies.
• Expand Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection.
• Join the security on-call rotation and incident response procedures.

Skills

Go programming

AWS

Kubernetes

Security engineering

Incident response

Tools

Go

AWS

Kubernetes (EKS)

Terraform

SIEM

Job description

Bastion is looking for a hands-on Senior Security Engineer to join as the second member of the security team. You will write production Go code, delve into AWS/EKS, and build security tooling to scale a comprehensive security program across engineering, product, and regulatory workstreams.

Expect to own a security domain and contribute to detections, telemetry, and guardrails while supporting on-call incident response and external audits.