Senior Security Application Engineer
BitGo Prime, LLC is BitGo Holdings’ institutional digital-asset trading and lending subsidiary, operating BitGo Prime’s trading, financing, collateral-management, and settlement offering.
Maintainer signals as of 9/2/2026
Funding history
Projects
About BitGo Prime, LLC
A Delaware LLC and wholly owned BitGo Holdings subsidiary. It acts as counterparty for digital-asset trades and provides institutional digital-asset lending; BitGo’s Prime product presents trading, financing, collateral management, settlement, and access to regulated custody in one institutional platform.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
Lead the technical execution of BitGo's product security strategy, securing high-growth FinTech and Web3 digital asset platforms through end-to-end security programs and automated controls integrated into the software development lifecycle. The role is full-time onsite at the Palo Alto office.
Requirements
- 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
- Proven background securing platforms within FinTech, Web3, and digital asset ecosystems.
- Strong proficiency in distributed systems, microservices, Python, or Java.
- Hands-on mastery of container security, Kubernetes, and AWS infrastructure hardening.
- Knowledge of SOC 2 Type II and GDPR technical controls.
- Deep expertise in AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
- Bachelor's degree in Computer Science, Engineering, or an equivalent technical field.
Responsibilities
- Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross-functional teams.
- Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
- Architect and implement secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.
- Design and deploy robust encryption services, key management systems, and advanced data protection controls across distributed environments.
- Oversee corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.
- Secure AI-integrated applications through input/output validation protocols and LLM guardrails.
- Engineer proactive defenses against sophisticated adversaries and nation-state-level threats.
Benefits
- Competitive base salary, bonus and stock options
- 100% company-paid health insurance for employee, partner, and dependents
- Up to 4% 401(k) company match
- Paid parental leave and paid vacation
- Free commuter/parking pass near Caltrain
- Free custom lunches, dinners, and snacks
- Computer equipment and workplace furniture to suit your needs
- Great colleagues and inspiring startup environment
