RefolkCandidates
Open nowEngineeringSecurity

Senior Security Application Engineer

BitGo · Palo Alto, California

Location
Palo Alto, California, United States
Level
Senior
Posted
2 weeks ago

About this role

BitGo (NYSE: BTGO) is the digital asset infrastructure company delivering custody, wallets, staking, trading, financing, stablecoins, and settlement services from regulated cold storage. Since 2013, BitGo has focused on accelerating the transition of the financial system to a digital asset economy. BitGo maintains a global presence and multiple regulated entities, including BitGo Bank & Trust, National Association, the first federally chartered digital asset trust bank owned by a publicly traded company. Today, BitGo serves thousands of institutions, including many of the industry's top brands, financial institutions, exchanges, and platforms, and millions of investors worldwide. For more information, visit www.bitgo.com.

This role will require being full-time onsite at our Palo Alto office to support collaborative team dynamics and innovative problem-solving.

We are seeking a Senior Application Security Engineer to lead the technical execution of our product security strategy. This role focuses on securing high-growth FinTech and Web3 digital asset platforms by building end-to-end security programs and integrating automated security controls directly into the software development lifecycle. The ideal candidate has a deep engineering background, hands-on experience defending complex cloud environments, and a passion for securing blockchain-adjacent technologies.

Key Responsibilities:

  • Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross-functional teams.
  • Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
  • Architect and implement secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.
  • Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.
  • Oversee operational security initiatives including corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.
  • Secure next-generation AI-integrated applications by establishing input/output validation protocols and LLM guardrails.
  • Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation-state-level threats.

Qualifications:

  • 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
  • Proven background securing platforms within FinTech, Web3, and digital asset ecosystems.
  • Strong engineering proficiency in distributed systems, microservices, and languages such as Python or Java.
  • Hands-on mastery of container security, Kubernetes orchestration, and AWS infrastructure hardening.
  • Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.
  • Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
  • Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the world’s financial markets.

Pay Transparency Notice: Depending upon your leveling and location, the compensation for this role averages between $200,000 - $235,000 USD base salary. Equity, an annual performance bonus and the benefits outlined below are also a part of this role's package.

Here are some of the benefits* of working at BitGo:

  • Competitive base salary, bonus and stock options
  • 100% company paid health insurance for employee, partner and dependents
  • Up to 4% 401k company match
  • Paid parental leave, Paid vacation
  • Free commuter/parking pass; near Caltrain
  • Free custom lunches, dinners and snacks
  • Computer equipment and workplace furniture to suit your needs
  • Great colleagues and inspiring startup environment

*Benefits may vary based on location

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed investing.

As published by BitGo. Applications are handled on their site.

Skills this posting mentions

KubernetesGDPRCompliance

About BitGo

BitGo (NYSE: BTGO) is the digital asset infrastructure company providing the foundation for the digital asset economy. Founded in 2013 by technologist Mike Belshe, the company was established on the conviction that digital assets would redefine the global financial system. BitGo became the first to commercialize multi-signature wallets and later developed advanced Threshold Signature Scheme (TSS) technology to set the industry standard for digital asset security. Today, the company delivers a comprehensive suite of services transforming how institutional capital is managed and deployed. From regulated custody, wallets, staking, trading, OTC services, financing, and settlement, BitGo unifies these services within a single, secure environment and enables the real-time mobilization of assets, reducing the friction and risk inherent in legacy financial rails. This infrastructure is underpinned by a global footprint of regulated entities and anchored by BitGo Bank & Trust, National Association, a federally chartered digital asset bank under the U.S. Office of the Comptroller of the Currency. The company's mission is to accelerate the transition of the existing financial system to a digital asset economy through a commitment to transparency, monetary freedom, and borderless, 24/7 markets. BitGo serves as the operational backbone for thousands of institutional clients, including the world’s leading cryptocurrency exchanges and regulated platforms. Following over a decade of technical milestones, including the launch of the Go Network and the release of Stablecoin-as-a-Service, BitGo transitioned to a public company in 2026, listing on the New York Stock Exchange. BitGo remains focused on delivering the regulated infrastructure and security necessary for global institutions to scale within a borderless, 24/7 financial system.

All 40 openings at BitGo

One click, then it is written

Apply to BitGo with a resume written for this role.

Queue Senior Security Application Engineer and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in BitGo’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at BitGo

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

500 free credits on sign-up. No card. Nothing is sent until you say so.

Listed from the job board BitGo publishes. Refolk is not the employer and does not handle their hiring. Applications go to BitGo directly.