17 hours ago
Base Salary
$200k - $235k/yr
Responsibilities
- Lead threat modeling and product security architecture reviews with cross-functional teams.
- Integrate SAST, DAST, and continuous vulnerability management into CI/CD pipelines.
- Architect and implement secure-by-default AWS infrastructure using Terraform and Kubernetes.
- Design encryption services, key management systems, and data protection controls across distributed environments.
- Oversee bug bounty programs, incident response workflows, and penetration testing engagements.
- Secure AI-integrated applications through input/output validation protocols and LLM guardrails.
- Engineer defenses against sophisticated and nation-state-level threats targeting platform infrastructure.
Requirements
- 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
- Experience securing FinTech, Web3, and digital asset platforms.
- Strong engineering proficiency in distributed systems, microservices, and Python or Java.
- Hands-on expertise with container security, Kubernetes orchestration, and AWS infrastructure hardening.
- Knowledge of technical controls for SOC 2 Type II and GDPR compliance.
- Expertise securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
- Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.
Benefits
- Full-time onsite work in the New York City office.
- $200,000–$235,000 USD base salary depending on leveling and location, plus equity and an annual performance bonus.
- Company-paid health insurance for employees, partners, and dependents.
- Up to 4% 401(k) company match, paid parental leave, and paid vacation.
- Free commuter or parking pass, custom lunches, dinners and snacks, computer equipment, and workplace furniture.
About BitGo
BitGo builds digital asset infrastructure for institutions, offering qualified custody, multi-signature and MPC wallets, trading, settlement, and staking services. Founded in 2013 and headquartered in Sioux Falls, it operates regulated trust companies in the U.S. and powers wallets and financial operations for exchanges, fintechs, and asset managers through fee-based custody and prime services.