Senior Security Engineer

Bastion provides the regulated infrastructure businesses need to hold, move, and issue stablecoins. The Senior Security Engineer will join the security team as its second engineer, working alongside the Staff Security Engineer and reporting to the CTO/CISO. The role focuses on scaling a security program across security engineering, infrastructure, product and application security, detection and response, and the technical side of GRC (SOC 1, SOC 2, OCC, and MiCA/DORA). The platform is almost entirely Go, running on Kubernetes (EKS) in AWS and managed with Terraform. The role can be remote within the US, with a preference for someone in NYC or open to relocating.

Responsibilities

Hands-on security engineering in Go, including writing code, reviewing design docs, and building security tooling and middleware; Contribute security feedback to engineering design docs; Ship security fixes, guardrails, and detections to production; Join the security on-call rotation and learn incident response procedures; Own at least one security domain end to end (e.g., Kubernetes and cloud hardening, application security in CI, detection engineering); Write and tune detections as code and reduce alert noise; Build reusable security libraries or middleware in Go and get them adopted by service teams; Act as security reviewer on design docs for new product features and architecture changes; Deliver control automation and evidence for SOC 1, SOC 2, and OCC workstreams; Help launch and triage a bug bounty program and grow DLP coverage; Drive multi-quarter initiatives such as default-deny service-to-service networking and just-in-time access; Expand Kubernetes cluster and container security; Help expand compliance scope with automation; Turn tabletop exercises and resilience testing into concrete fixes; Influence the security roadmap

Requirements

Ability to write production code; Comfort working in a fast-paced startup where the specific work changes; Ability to contribute in the first week and be fully productive by the third month