Senior Security Application Engineer

BitGo is seeking a Senior Application Security Engineer to lead technical execution of its product security strategy, securing high-growth FinTech and Web3 digital asset platforms by building end-to-end security programs and integrating automated security controls into the SDLC.

• Lead threat modeling and product security architecture reviews cross-functionally
• Integrate security automation into CI/CD via SAST, DAST, and continuous vulnerability management
• Architect secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes
• Design encryption services, KMS, and data-protection controls across distributed environments
• Oversee bug bounty programs, incident response, and penetration testing
• Secure AI-integrated applications, including LLM guardrails

• 8+ years engineering and scaling security programs for high-growth startups
• Background securing FinTech, Web3, or digital-asset platforms
• Strong distributed systems and microservices engineering in Python or Java
• Container security and Kubernetes/AWS hardening
• SOC 2 Type II and GDPR technical controls experience
• AI/ML/MLOps security expertise

BitGo is the leading provider of secure digital asset financial services, processing approximately 20% of all global Bitcoin transactions by value. This role works five days a week from BitGo's San Francisco office.