14 hours ago
Base Salary
$180k - $250k/yr
Responsibilities
- Write production Go code and build reusable security tooling, libraries, middleware, guardrails, and detections.
- Review engineering design documents and architecture changes as the security reviewer.
- Own a security domain such as Kubernetes and cloud hardening, application security in CI, or detection engineering.
- Write and tune detections as code, add telemetry sources, and reduce alert noise.
- Expand Kubernetes, container, image-scanning, image-signing, admission-policy, pod-security, and runtime protections.
- Support incident response, security on-call, DLP rollout, bug bounty operations, resilience testing, and tabletop exercises.
- Deliver automated controls and evidence for SOC 1, SOC 2, OCC, and other regulatory workstreams.
- Influence cross-functional security planning and the security roadmap.
Requirements
- Ability to write production code, particularly in Go.
- Hands-on experience with AWS, Kubernetes, SIEM and security services.
- Ability to become productive quickly in a fast-paced startup environment and contribute from the first week.
- Ability to own security initiatives independently and work across infrastructure, product, application security, detection and response, and technical GRC.
- Ability to participate in a security on-call rotation.
Benefits
- Remote work within the United States; preference for candidates in New York City or willing to relocate.
- Opportunity to join a 40-person startup as its second security engineer and directly influence the security roadmap and platform.
- Participation in the security on-call rotation and ownership of meaningful, cross-functional security initiatives.
Tech Stack
Categories
About Bastion
Bastion builds regulated stablecoin infrastructure for enterprises, providing a platform with custodial wallets, global payment orchestration, and white-label stablecoin issuance. Businesses, including Fortune 500 companies, financial institutions, and fintechs, use it to hold, move, and issue stablecoins and integrate web3 money flows. Founded in 2023 and privately held, Bastion operates as a regulated financial institution with a trust charter supporting compliance-focused deployments.