Responsibilities
- Develop automated security testing to validate secure coding practices.
- Create and deliver secure development training.
- Conduct application security reviews and threat modeling, including secure code review, architectural design, and dynamic testing.
- Perform application security vulnerability management and support the bug bounty program.
- Facilitate secure release preparation and consult with engineering teams on application security best practices.
- Drive security projects from ideation and requirements through implementation.
- Mature the security program using the NIST CSF.
- Assist with relevant incident response activities.
Requirements
- 5+ years of application security experience.
- 1–2 years of software development and mobile security experience.
- Familiarity with security libraries, security controls, and common security flaws.
- Experience with OWASP, static and dynamic analysis, and common security tools.
- Basic understanding of network and web protocols including TCP/IP, UDP, IPSEC, HTTP, and HTTPS.
- Experience with the vulnerability management lifecycle.
- Familiarity with cloud security controls and best practices.
- Experience working with developers.
- Strong written and verbal communication skills with the ability to explain complex topics clearly.
- Programming experience with TypeScript, Go, Python, Java, or Kotlin is preferred.
Benefits
- Competitive salary.
- IT equipment support for work.
- Meal and commute allowance.
- Medical insurance.
- Well-being allowance covering medical, wellness, and fitness activities.
- Free snacks at the Bangalore office.
- Onsite work Monday through Friday at the Bangalore office.
- Occasional evening meetings may be required.
About BitGo
BitGo (NYSE: BTGO) is the digital asset infrastructure company providing the foundation for the digital asset economy. Founded in 2013 by technologist Mike Belshe, the company was established on the conviction that digital assets would redefine the global financial system. BitGo became the first to commercialize multi-signature wallets and later developed advanced Threshold Signature Scheme (TSS) technology to set the industry standard for digital asset security. Today, the company delivers a comprehensive suite of services transforming how institutional capital is managed and deployed. From regulated custody, wallets, staking, trading, OTC services, financing, and settlement, BitGo unifies these services within a single, secure environment and enables the real-time mobilization of assets, reducing the friction and risk inherent in legacy financial rails. This infrastructure is underpinned by a global footprint of regulated entities and anchored by BitGo Bank & Trust, National Association, a federally chartered digital asset bank under the U.S. Office of the Comptroller of the Currency. The company's mission is to accelerate the transition of the existing financial system to a digital asset economy through a commitment to transparency, monetary freedom, and borderless, 24/7 markets. BitGo serves as the operational backbone for thousands of institutional clients, including the world’s leading cryptocurrency exchanges and regulated platforms.