Senior Security Application Engineer
About the role
BitGo is a digital‑asset infrastructure company providing custody, wallets, staking, trading, financing, stablecoins, and settlement services from regulated cold storage. Since 2013 the company has accelerated the transition of the financial system to a digital‑asset economy and operates globally with multiple regulated entities, including the first federally chartered digital‑asset trust bank owned by a publicly traded company. This position is full‑time onsite at the Palo Alto office to support collaborative team dynamics and innovative problem‑solving.
The Senior Application Security Engineer will lead the technical execution of BitGo’s product security strategy, securing high‑growth FinTech and Web3 platforms by building end‑to‑end security programs and integrating automated security controls directly into the software development lifecycle.
Responsibilities
- Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross‑functional teams.
- Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
- Architect and implement secure‑by‑default cloud infrastructure on AWS using Terraform and Kubernetes.
- Design and deploy robust encryption services, key‑management systems (KMS), and advanced data‑protection controls across distributed environments.
- Oversee operational security initiatives including corporate bug bounty programs, incident‑response workflows, and regular penetration‑testing engagements.
- Secure next‑generation AI‑integrated applications by establishing input/output validation protocols and LLM guardrails.
- Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation‑state‑level threats.
Qualifications
- 8+ years of experience engineering and scaling end‑to‑end security programs for high‑growth startups.
- Proven background securing platforms within FinTech, Web3, and digital‑asset ecosystems.
- Strong engineering proficiency in distributed systems, microservices, and languages such as Python or Java.
- Hands‑on mastery of container security, Kubernetes orchestration, and AWS infrastructure hardening.
- Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.
- Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
- Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.
Why Join BitGo?
Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. BitGo’s team embodies ownership, craftsmanship, and open communication. Colleagues are encouraged to bring innovative thinking and problem‑solving to a mission that is transforming the world’s financial markets.
Pay
Depending upon leveling and location, the compensation for this role averages between $200,000 – $235,000 USD base salary, plus equity, an annual performance bonus, and the benefits outlined below.
Benefits
- Competitive base salary, bonus and stock options
- 100% company‑paid health insurance for employee, partner and dependents
- Up to 4% 401(k) company match
- Paid parental leave and paid vacation
- Free commuter/parking pass; near Caltrain
- Free custom lunches, dinners and snacks
- Computer equipment and workplace furniture to suit your needs
- Great colleagues and an inspiring startup environment
- Benefits may vary based on location