17 hours ago
Base Salary
$200k - $235k/yr
Responsibilities
- Lead threat modeling and product security architecture reviews with cross-functional teams.
- Integrate SAST, DAST, and continuous vulnerability management tools into development pipelines.
- Architect and implement secure AWS infrastructure using Terraform and Kubernetes.
- Design encryption services, key management systems, and data protection controls for distributed environments.
- Oversee bug bounty programs, incident response workflows, and penetration testing engagements.
- Secure AI-integrated applications through input/output validation protocols and LLM guardrails.
- Engineer defenses protecting platform infrastructure from sophisticated and nation-state-level threats.
Requirements
- 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
- Experience securing FinTech, Web3, and digital asset platforms.
- Strong engineering proficiency in distributed systems and microservices, with languages such as Python or Java.
- Hands-on expertise in container security, Kubernetes, and AWS infrastructure hardening.
- Knowledge of technical controls for SOC 2 Type II and GDPR compliance.
- Expertise securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
- Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.
Benefits
- $200,000–$235,000 USD base salary, plus equity and an annual performance bonus.
- 100% company-paid health insurance for the employee, partner, and dependents.
- Up to 4% 401k company match.
- Paid parental leave and paid vacation.
- Free commuter or parking pass near Caltrain.
- Free custom lunches, dinners, and snacks.
- Computer equipment and workplace furniture provided to suit employee needs.
- Full-time onsite work at the Palo Alto office; benefits may vary by location.
About BitGo
BitGo builds digital asset infrastructure for institutions, offering qualified custody, multi-signature and MPC wallets, trading, settlement, and staking services. Founded in 2013 and headquartered in Sioux Falls, it operates regulated trust companies in the U.S. and powers wallets and financial operations for exchanges, fintechs, and asset managers through fee-based custody and prime services.