Senior Security Application Engineer

BitGo; San Francisco (CA); On-site; USD 200,000 - 235,000; Full time

Benefits offered by this job

Competitive base salary

Stock options

100% health insurance for employee and

Dependents

401k match

Parental leave

Vacation

Commuter benefits

Lunch and snacks

Equipment provided

Job summary

BitGo is seeking a senior security engineering leader to drive end‑to‑end security across our digital asset platforms. You will lead threat modeling and security architecture reviews, and integrate security into CI/CD pipelines with SAST/DAST and vulnerability management.

You will architect secure AWS infrastructure with Terraform and Kubernetes, design encryption and KMS controls, and oversee bug bounty programs and incident response.

Qualifications

• 8+ years of experience engineering and scaling end‑to‑end security programs for high‑growth startups.
• Proven background securing platforms within FinTech, Web3, and digital asset ecosystems.
• Strong engineering proficiency in distributed systems, microservices, and languages such as Python or Java.
• Hands‑on mastery of container security, Kubernetes orchestration, and AWS infrastructure hardening.
• Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.
• Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
• Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.

Responsibilities

• Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross‑functional teams.
• Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
• Architect and implement secure‑by‑default cloud infrastructure on AWS using Terraform and Kubernetes.
• Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.
• Oversee operational security initiatives including corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.
• Secure next‑generation AI‑integrated applications by establishing input/output validation protocols and LLM guardrails.
• Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation‑state‑level threats.

Skills

Security engineering

Distributed systems

Microservices

Python

Java

Kubernetes

AWS hardening

SOC 2/GDPR compliance

Education

Bachelor's degree in Computer Science or Engineering

Tools

Terraform

CI/CD tooling

Job description

BitGo is the leading infrastructure provider of digital asset solutions, delivering custody, wallets, staking, trading, financing, and settlement services from regulated cold storage. Since our founding in 2013, we have focused on enabling our clients to securely navigate the digital asset space. With a global presence and multiple Trust companies, BitGo serves thousands of institutions, including many of the industry's top brands, exchanges, and platforms, and millions of retail investors worldwide. As the operational backbone of the digital economy, BitGo handles a significant portion of Bitcoin network transactions and is the largest independent digital asset custodian, and staking provider, in the world. For more information, visit www.bitgo.com.

This role will require being full‑time onsite at our San Francisco office to support collaborative team dynamics and innovative problem‑solving.

Key Responsibilities

• Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross‑functional teams.
• Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
• Architect and implement secure‑by‑default cloud infrastructure on AWS using Terraform and Kubernetes.
• Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.
• Oversee operational security initiatives including corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.
• Secure next‑generation AI‑integrated applications by establishing input/output validation protocols and LLM guardrails.
• Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation‑state‑level threats.

Qualifications

• 8+ years of experience engineering and scaling end‑to‑end security programs for high‑growth startups.
• Proven background securing platforms within FinTech, Web3, and digital asset ecosystems.
• Strong engineering proficiency in distributed systems, microservices, and languages such as Python or Java.
• Hands‑on mastery of container security, Kubernetes orchestration, and AWS infrastructure hardening.
• Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.
• Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
• Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the world’s financial markets.

Pay Transparency Notice

Depending upon your leveling and location, the compensation for this role averages between $200,000 - $235,000 USD base salary. Equity, an annual performance bonus and the benefits outlined below are also a part of this role's package.

Benefits

• Competitive base salary, bonus and stock options
• 100% company paid health insurance for employee, partner and dependents
• Up to 4% 401k company match
• Paid parental leave, Paid vacation
• Free commuter/parking pass; near BART and Muni
• Free custom lunches, dinners and snacks
• Computer equipment and workplace furniture to suit your needs
• Great colleagues and inspiring startup environment
• Benefits may vary based on location

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed investing.