14 hours ago
Base Salary
$180k - $250k/yr
Responsibilities
- Write production security code, reusable libraries, middleware, guardrails, and security tooling in Go.
- Review engineering design documents and influence secure architecture and product development.
- Own a security domain such as Kubernetes and cloud hardening, application security in CI, or detection engineering.
- Write and tune detections as code, add telemetry sources, reduce alert noise, and participate in security on-call and incident response.
- Expand Kubernetes, container, cloud, identity, endpoint, and SaaS security, including image scanning, signing, admission policies, pod security standards, and runtime protection.
- Automate controls and audit evidence for SOC 1, SOC 2, OCC, and related regulatory workstreams.
- Help launch and triage the bug bounty program and expand DLP coverage and policies.
- Drive multi-quarter security initiatives and influence the security roadmap.
Requirements
- Senior-level, hands-on security engineering experience with the ability to write production code.
- Ability to work with Go codebases and build secure libraries or middleware adopted by service teams.
- Experience with AWS, Kubernetes, Terraform, security services, SIEM and detection pipelines, and cloud or container security.
- Ability to contribute across application security, infrastructure security, detection and response, access controls, and technical GRC.
- Comfort working in a fast-paced startup environment, contributing from the first week, and becoming productive by the third month.
- Willingness to participate in security on-call and incident response rotations.
- Experience or interest in regulated environments and controls related to SOC 1, SOC 2, OCC, MiCA, or DORA is relevant.
Benefits
- Remote within the US, with a preference for candidates in NYC or willing to relocate.
- Participation in the security on-call rotation and broad ownership as the second security engineer.
- Opportunity to work directly on regulated stablecoin infrastructure and high-impact security initiatives.
Tech Stack
Categories
About Bastion
Bastion builds regulated stablecoin infrastructure for enterprises, providing a platform with custodial wallets, global payment orchestration, and white-label stablecoin issuance. Businesses, including Fortune 500 companies, financial institutions, and fintechs, use it to hold, move, and issue stablecoins and integrate web3 money flows. Founded in 2023 and privately held, Bastion operates as a regulated financial institution with a trust charter supporting compliance-focused deployments.