1 month ago
Base Salary
$180k - $250k/yr
Responsibilities
- Write production Go code and build reusable security libraries, middleware, guardrails, and secure defaults.
- Own security domains such as Kubernetes and cloud hardening, application security in CI, or detection engineering.
- Write and tune detections, add telemetry sources, reduce alert noise, and participate in security incident response and on-call rotation.
- Review engineering design documents and architecture changes for security issues.
- Expand Kubernetes, container, identity, endpoint, SaaS, and cloud security controls, including image scanning, signing, admission policies, pod security, and runtime protection.
- Automate compliance controls and evidence for SOC 1, SOC 2, OCC, and MiCA/DORA workstreams.
- Help launch and triage the bug bounty program and expand DLP coverage and policies.
Requirements
- Senior-level hands-on security engineering experience with the ability to write production code.
- Ability to work with Go, AWS, Kubernetes, and Terraform in a production environment.
- Ability to independently own a security domain and deliver measurable risk reduction.
- Willingness to participate in security on-call and incident response procedures.
- Ability to operate effectively in a fast-paced startup and contribute productively from the first week.
Benefits
- Remote within the United States, with a preference for candidates in New York City or willing to relocate.
- Opportunity to join a 40-person company as its second security engineer and work closely with the Staff Security Engineer and CTO/CISO.
Tech Stack
Categories
About Bastion
Bastion builds regulated stablecoin infrastructure for enterprises, providing a platform with custodial wallets, global payment orchestration, and white-label stablecoin issuance. Businesses, including Fortune 500 companies, financial institutions, and fintechs, use it to hold, move, and issue stablecoins and integrate web3 money flows. Founded in 2023 and privately held, Bastion operates as a regulated financial institution with a trust charter supporting compliance-focused deployments.