Senior Security Engineer

Bastion is looking for a hands-on Senior Security Engineer to join its security team as the second engineer, working alongside the Staff Security Engineer and reporting to the CTO/CISO. You'll scale the security program across security engineering, infrastructure, product and application security, detection and response, and the technical side of GRC including SOC 1, SOC 2, OCC, and MiCA/DORA compliance. As a 40-person company, your work will directly protect users and partners building on a foundation that includes SOC 2 Type II certification, conditional OCC approval for a national trust charter, a SIEM and detection pipeline, runtime security for Kubernetes, and auditable access to production.

What you'll do

• Get hands-on with the Go codebase, AWS and Kubernetes environment, SIEM, and security services; contribute security feedback to engineering design docs; and ship security fixes, guardrails, and detections to production in your first month
• Join and contribute to the incident response and on-call rotation
• Own security domains independently such as Kubernetes and cloud hardening, application security in CI, or detection engineering
• Write and tune detections as code, add new telemetry sources, and reduce alert noise
• Build reusable security libraries and middleware in Go such as authorization, tenant isolation, request signing, or input validation, and drive adoption across service teams
• Review design docs for new product features and architecture changes from a security perspective
• Deliver control automation and evidence for active audit and regulatory workstreams including SOC 1, SOC 2, and OCC
• Launch and triage the bug bounty program and expand DLP coverage and policies
• Drive multi-quarter initiatives such as default-deny service-to-service networking, security policy evaluation, and just-in-time granular access across systems
• Expand Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection
• Help expand compliance scope with automation instead of spreadsheets
• Turn tabletop exercises and resilience testing into concrete fixes
• Participate in cross-functional planning and influence the security roadmap

What you bring

• Ability to write production code in Go
• Experience with Kubernetes, AWS, and Terraform
• Experience building and scaling security programs, including security engineering, infrastructure security, application security, or detection and response
• Familiarity with regulated environments and compliance frameworks such as SOC 2, OCC requirements, or MiCA/DORA

Nice to have

• Experience with stablecoins, payment systems, or regulated financial infrastructure
• Background in DLP programs, incident response, or GRC automation

What we offer

• Remote work within the US; preference for NYC or candidates open to relocating

About Bastion

Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins. The platform combines custodial wallets, global payment orchestration, and stablecoin issuance, with compliance and risk controls built directly into the system. Bastion operates through its own regulated entities and can support customers running their own licensed programs.