Senior Security Engineer

Job not on LinkedIn

🔥 37 minutes ago

🗽 New York – Remote

🗽 New York – Remote

💵 $180k - $250k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bastion

WebsiteLinkedInAll Job Openings

11 - 50 employees

₿ Crypto

💳 Fintech

☁️ SaaS

Crypto • Fintech • SaaS

Bastion is a regulated wallet and digital asset management API platform that empowers businesses to build safe and effective crypto products. As a licensed financial institution, Bastion provides a flexible wallet platform with enterprise-grade custody solutions. It offers a fast, secure, and compliant Web3 infrastructure for enterprise clients, enabling regulated embedded wallets and white label APIs to power various financial applications. Bastion supports businesses with scalable APIs for payments, merchant payouts, payroll, and treasury management, prioritizing regulatory compliance with a built-in system that simplifies KYC and KYB processes. With a focus on secure key management using HSMs and Nitro Secure Enclaves, Bastion is designed to handle high transaction volumes while maintaining compliance.

📋 Description

• Join Bastion's security team as its second engineer • Report to the CTO/CISO and work alongside the Staff Security Engineer • Scale security engineering, infrastructure and application security, detection and response, and technical GRC programs • Write production Go code, review design documents, and build reusable security tooling and middleware • Work with Bastion's Go platform running on Kubernetes (EKS) in AWS and managed with Terraform • Learn and contribute to the SIEM, security services, DLP program, incident response, and on-call procedures • Ship security fixes, guardrails, or detections to production • Own security domains such as Kubernetes and cloud hardening, application security in CI, or detection engineering • Write and tune detections as code, add telemetry sources, and reduce alert noise • Build reusable Go security libraries or middleware and drive adoption by service teams • Review design documents for new product features and architecture changes • Deliver control automation and evidence for audits and regulatory workstreams • Help launch and triage the bug bounty program • Drive multi-quarter initiatives including service-to-service networking, security policy evaluation, and granular access • Expand Kubernetes cluster and container security from build through runtime • Grow shared security middleware and libraries across the codebase • Expand compliance scope through automation • Turn tabletop exercises and resilience testing into concrete fixes • Influence the security roadmap through cross-functional planning

🎯 Requirements

• Hands-on Senior Security Engineer capable of writing production code • Ability to work with Go codebases and write security services in Go • Experience with AWS, Kubernetes, EKS, Terraform, SIEM, and security services • Ability to contribute security feedback to engineering design documents • Ability to ship security fixes, guardrails, or detections to production • Ability to participate in incident response and security on-call rotation • Experience with DLP programs and rollout • Ability to own a security domain end to end • Experience writing and tuning detections as code and adding telemetry sources • Ability to build reusable security libraries or middleware in Go • Ability to review product feature and architecture design documents • Ability to deliver control automation and audit evidence for SOC 1, SOC 2, or OCC workstreams • Ability to contribute to bug bounty programs and DLP coverage • Experience with Kubernetes and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection • Ability to work in a fast-paced startup environment and contribute from the first week • Legally authorized to work in the United States • Willingness to undergo a criminal background check • Must be 18 or older at application • Bachelor's degree or other educational credential not explicitly required

🏖️ Benefits

• Equity offering • Flexible work schedules • Unlimited paid vacation & holidays • Comprehensive health coverage • Life insurance • Retirement benefits • Paid parental leave • Tax-advantaged accounts • One Medical • Spring Health • Global payment orchestration and stablecoin issuance platform exposure