Senior Security Application Engineer

Bitgo
New York, NY
On-site

In the 12 months to 30 Jun 2026, Bitgo filed 1 H-1B position titled "Application Security Engineer". Source: U.S. Department of Labor, LCA disclosure data. A record of filings already made, not a commitment to sponsor.

Who this role is best for

Aimed at senior engineers with FinTech/Web3 security experience who can lead technical execution and collaborate cross-functionally in New York.

Best fit for

  • Candidates with 8+ years in security programs for high-growth startups and FinTech platforms
    — “8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.”
  • Individuals with deep cloud infrastructure and automation experience, particularly on AWS and Kubernetes
    — “Architect and implement secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.”
  • Professionals with a background in securing AI/ML workflows and agentic systems
    — “Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.”

Things to consider

  • Full-time onsite presence in New York is required, limiting remote flexibility
    — “This role will require being full-time onsite at our New York City office”

How to stand out

  • Highlight experience with threat modeling and cloud security automation in your resume and interviews
    — “Lead comprehensive threat modeling and product security architecture reviews”
  • Demonstrate hands-on skills in securing AI/ML lifecycles and LLM guardrails
    — “Secure next-generation AI-integrated applications by establishing input/output validation protocols and LLM guardrails.”
  • Emphasize your background in regulated environments and compliance standards
    — “Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.”
  • Showcase your ability to implement security automation in CI/CD pipelines
    — “Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.”
  • Position yourself as an expert in distributed systems and encryption services
    — “Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.”
Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Lead comprehensive threat modeling and product security architecture reviews
  • Integrate security automation into CI/CD pipelines
  • Architect and implement secure-by-default cloud infrastructure
  • Design and deploy robust encryption services
  • Oversee operational security initiatives
Typical background
8+ years of experience engineering and scaling end-to-end security programsProven background securing platforms within FinTech, Web3, and digital asset ecosystems

Skills & requirements

Required

Product Security StrategyThreat ModelingProduct Security Architecture ReviewsSecurity AutomationCloud InfrastructureEncryption ServicesKey Management SystemsData ProtectionOperational SecurityAi-integrated ApplicationsProactive DefensesDistributed SystemsMicroservicesContainer SecurityKubernetes OrchestrationAWS Infrastructure HardeningTechnical ControlsSOC 2 Type II ComplianceGDPR ComplianceAi/ml Lifecycle Security

Stack & domain

Threat ModelingProduct Security Architecture ReviewsSecurity AutomationCi/cd PipelinesSast, Dast, Continuous Vulnerability ManagementCloud Infrastructure (aws, Terraform, Kubernetes)Encryption ServicesKey Management Systems (kms)Advanced Data Protection ControlsOperational SecurityCorporate Bug Bounty ProgramsIncident Response WorkflowsPenetration TestingAi-integrated ApplicationsInput/output Validation ProtocolsLLM GuardrailsProactive DefensesPlatform Infrastructure SecurityDistributed SystemsMicroservicesPythonJavaContainer SecurityKubernetes OrchestrationAWS Infrastructure HardeningSOC 2 Type II ComplianceGDPR ComplianceAi/ml LifecyclesMlops FrameworksAgentic AI PlatformsCollaborationInnovationPassion For CybersecurityTechnical ChopsDrive To DeliverExecutionOpen CommunicationSecurityFintechWeb3Digital Asset PlatformsBlockchain-adjacent Technologies

About the role

Original posting from Bitgo via Greenhouse

BitGo (NYSE: BTGO) is the digital asset infrastructure company delivering custody, wallets, staking, trading, financing, stablecoins, and settlement services from regulated cold storage. Since 2013, BitGo has focused on accelerating the transition of the financial system to a digital asset economy. BitGo maintains a global presence and multiple regulated entities, including BitGo Bank & Trust, National Association, the first federally chartered digital asset trust bank owned by a publicly traded company. Today, BitGo serves thousands of institutions, including many of the industry's top brands, financial institutions, exchanges, and platforms, and millions of investors worldwide. For more information, visit www.bitgo.com.

This role will require being full-time onsite at our New York City office to support collaborative team dynamics and innovative problem-solving. 

We are seeking a Senior Application Security Engineer to lead the technical execution of our product security strategy. This role focuses on securing high-growth FinTech and Web3 digital asset platforms by building end-to-end security programs and integrating automated security controls directly into the software development lifecycle. The ideal candidate has a deep engineering background, hands-on experience defending complex cloud environments, and a passion for securing blockchain-adjacent technologies.

Key Responsibilities:

Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross-functional teams.

Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.

Architect and implement secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.

Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.

Oversee operational security initiatives including corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.

Secure next-generation AI-integrated applications by establishing input/output validation protocols and LLM guardrails.

Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation-state-level threats.

Qualifications:

8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.

Proven background securing platforms within FinTech, Web3, and digital asset ecosystems.

Strong engineering proficiency in distributed systems, microservices, and languages such as Python or Java.

Hands-on mastery of container security, Kubernetes orchestration, and AWS infrastructure hardening.

Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.

Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.

Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the world’s financial markets.

Pay Transparency Notice: Depending upon your leveling and location, the compensation for this role averages between $200,000 - $235,000 USD base salary. Equity, an annual performance bonus and the benefits outlined below are also a part of this role's package. 

Here are some of the benefits* of working at BitGo:

Competitive base salary, bonus and stock options

100% company paid health insurance for employee, partner and dependents

Up to 4% 401k company match

Paid parental leave, Paid vacation

Free commuter/parking pass; near Caltrain

Free custom lunches, dinners and snacks 

Computer equipment and workplace furniture to suit your needs

Great colleagues and inspiring startup environment

*Benefits may vary based on location 

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed investing.

Source: Bitgo careers (Greenhouse)

Similar roles

More roles at Bitgo