高级安全工程师

Tags: Web3 Jobs • Blockchain Security Jobs • Web3 Golang Jobs • Cryptocurrency Kubernetes Jobs • Web3 Remote Jobs • Cryptocurrency Full Time Jobs • Blockchain Web3 Jobs • Web3 Stablecoin JobsAbout BastionBastion provides the regulated infrastructure businesses need to hold, move, and issue stablecoins. Our platform combines custodial wallets, global payment orchestration, and stablecoin issuance. Customers can use each product independently or connect them into a single end-to-end flow.We operate through our own regulated entities, with compliance and risk controls built directly into the platform. We can also support customers operating under their own licenses with the compliance and financial operations required to run their programs.OverviewWe're looking for a hands-on Senior Security Engineer to join our security team as its second engineer. You'll work alongside our Staff Security Engineer and report to our CTO/CISO.The foundation is already in place: a SOC 2 Type II report, conditional approval from the OCC for a national trust charter, a SIEM and detection pipeline, runtime security for Kubernetes, and time-limited, auditable access to production. You'll help scale that program across security engineering, infrastructure, product and application security, detection and response, and the technical side of GRC (SOC 1, SOC 2, OCC, and MiCA/DORA).As a 40-person company, your work will directly protect our users and partners. You'll build on a strong foundation (we're featured in this AWS case study). Our platform is almost entirely Go, running on Kubernetes (EKS) in AWS and managed with Terraform, and our security services are written in Go too. You must be able to write production code. Expect to spend most of your time writing code, reviewing design docs, and building security tooling and middleware that engineers can easily drop into any service.This role can be remote within the US, though we'd prefer someone in NYC or open to relocating.Work to Be DoneInstead of a list of requirements, we want to give you a directional look into the first 30, 90, and 180 days on the job.We are a startup, so the pace is fast and the specific work will change. People who thrive here find ways to contribute in their first week and are fully productive by their third month. You need to be okay with that.If you think this is something you can handle, we'll be excited to speak with you.First 30 days: Learn and ship from week oneGet hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security servicesContribute security feedback to at least one engineering design docShip your first security fix, guardrail, or detection to productionLearn our incident response and on-call procedures, and join our security rotationGet up to speed on our DLP program and start contributing to its rolloutOutcomesProduction code shipped in your first monthJoin the security on-call rotation, so the team has real coverageBy 90 days: Own initiatives independentlyOwn at least one security domain end to end, such as Kubernetes and cloud hardening, application security in CI, or detection engineeringWrite and tune detections as code, add new telemetry sources, and reduce alert noiseShip your first reusable security library or middleware in Go (for example authorization, tenant isolation, request signing, or input validation) and get it adopted by at least one service teamBe the security reviewer on design docs for new product features and architecture changesDeliver control automation and evidence for an active audit or regulatory workstream (SOC 1, SOC 2, OCC)Help launch and triage our bug bounty program, and grow our DLP coverage and policiesOutcomesMeasurable risk reduction from controls, fixes, or detections you builtRecognized as the owner of at least one security domainBy 180 days: Scale your impactDrive multi-quarter initiatives such as default-deny service-to-service networking, security policy evaluation, or just-in-time, granular access across more systemsExpand our Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protectionGrow a shared set of security middleware and libraries that is adopted across the codebase, so the secure path is the easy path for our Go engineersHelp expand our compliance scope with automation instead of spreadsheetsTurn tabletop exercises and resilience testing into concrete fixesJoin cross-functional planning and influence the security roadmapOutcomesFunction-wide improvements to how we build and ship secure systemsClear, measurable business impact from your security workSome challenges you might tackleBuilding reusable security building blocks that make secure defaults easy across our platformProtecting the critical systems at the core of a regulated stablecoin platformTurning OCC and MiCA/DORA requirements into controls that are engineered, tested, and continuously evidencedBuilding high-signal detections across cloud, Kubernetes, identity, endpoint, and SaaS telemetryHardening our Kubernetes clusters and container supply chain, from build to admission to runtime, without slowing deploysIf you think this is something you can handle, we will be excited to speak with you.Bastion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, and placement. Bastion participates in E-Verify to authorize eligibility of employment in the United States.Apply here 👉 Senior Security Engineer