Security Engineer, Bastion

• Bachelor’s degree in Computer Engineering or a related field
• 3+ years of experience in application or product security (startup or high-growth environment preferred)
• Proficiency in at least one of the following: Python, TypeScript, Rust, or Go
• Experience designing and implementing security controls for web applications and APIs
• Familiarity with vulnerability management and secure SDLC practices
• Ownership and Proactivity: Demonstrated sense of ownership and accountability, combined with a forward-thinking approach and an unwavering motivation to excel in their designated role
• Customer-Centric Mindset: Proven track record of placing customers at the heart of all decisions, striving beyond satisfaction to truly impress and exceed expectations
• Detail-Oriented: Demonstrated ability to produce high-quality work with meticulous attention to detail, ensuring consistency and precision in every task
• Team Player with a Competitive Edge: Strong collaboration skills, understanding that success is achieved collectively
• Continuous Improvement Mindset: Never settle for the status quo. Always looking for growth opportunities and new challenges, with a vision of powering the future of web3
• Recognizes that the journey to excellence is ongoing and embraces the challenge
• Empathetic Insight: Demonstrated ability to understand and share the feelings of others, fostering genuine connections and promoting a supportive environment

Desirable

• Bastion is seeking a Security Engineer to design and implement security architecture across our platform
• As the second hire on Bastion’s security team, you’ll take ownership of application security across the stack, from threat modeling to production hardening
• You’ll help define core security processes (like vulnerability management and audits), and work closely with engineering to design secure-by-default systems
• This role blends hands-on technical execution with broad strategic impact in a fast-moving fintech environment
• Define and implement security architecture across Bastion’s backend and frontend systems
• Drive threat modeling, secure code practices, and proactive vulnerability identification
• Build and run Bastion’s vulnerability management process, including triage and remediation of bug bounty reports
• Lead third-party audits, ensure audit readiness, and generate customer-facing security reports
• Serve as a security advisor to engineering teams, providing guidance on secure design and implementation patterns
• Champion security culture through internal education and tooling