Senior Security Engineer, Bastion
$180-250k
Offers equity
More information about location
Web3 intergration platform
Open for applications
Web3 intergration platform
21-100 employees
Open for applications
$180-250k
Offers equity
More information about location
21-100 employees
Company mission
To enable the next generation of web3 interactions for businesses, that feel like web2.
Role
Who you are
- If you think this is something you can handle, we will be excited to speak with you
What the job involves
- We're looking for a hands-on Senior Security Engineer to join our security team as its second engineer
- You'll work alongside our Staff Security Engineer and report to our CTO/CISO
- The foundation is already in place: a SOC 2 Type II report, conditional approval from the OCC for a national trust charter, a SIEM and detection pipeline, runtime security for Kubernetes, and time-limited, auditable access to production
- You'll help scale that program across security engineering, infrastructure, product and application security, detection and response, and the technical side of GRC (SOC 1, SOC 2, OCC, and MiCA/DORA)
- As a 40-person company, your work will directly protect our users and partners
- You'll build on a strong foundation (we're featured in this AWS case study)
- Our platform is almost entirely Go, running on Kubernetes (EKS) in AWS and managed with Terraform, and our security services are written in Go too
- You must be able to write production code
- Expect to spend most of your time writing code, reviewing design docs, and building security tooling and middleware that engineers can easily drop into any service
- First 30 days: Learn and ship from week one
- Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services
- Contribute security feedback to at least one engineering design doc
- Ship your first security fix, guardrail, or detection to production
- Learn our incident response and on-call procedures, and join our security rotation
- Get up to speed on our DLP program and start contributing to its rollout
- Outcomes
- Production code shipped in your first month
- Join the security on-call rotation, so the team has real coverage
- By 90 days: Own initiatives independently
- Own at least one security domain end to end, such as Kubernetes and cloud hardening, application security in CI, or detection engineering
- Write and tune detections as code, add new telemetry sources, and reduce alert noise
- Ship your first reusable security library or middleware in Go (for example authorization, tenant isolation, request signing, or input validation) and get it adopted by at least one service team
- Be the security reviewer on design docs for new product features and architecture changes
- Deliver control automation and evidence for an active audit or regulatory workstream (SOC 1, SOC 2, OCC)
- Help launch and triage our bug bounty program, and grow our DLP coverage and policies
- Measurable risk reduction from controls, fixes, or detections you built
- Recognized as the owner of at least one security domain
- By 180 days: Scale your impact
- Drive multi-quarter initiatives such as default-deny service-to-service networking, security policy evaluation, or just-in-time, granular access across more systems
- Expand our Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection
- Grow a shared set of security middleware and libraries that is adopted across the codebase, so the secure path is the easy path for our Go engineers
- Help expand our compliance scope with automation instead of spreadsheets
- Turn tabletop exercises and resilience testing into concrete fixes
- Join cross-functional planning and influence the security roadmap
- Function-wide improvements to how we build and ship secure systems
- Clear, measurable business impact from your security work
- Some challenges you might tackle
- Building reusable security building blocks that make secure defaults easy across our platform
- Protecting the critical systems at the core of a regulated stablecoin platform
- Turning OCC and MiCA/DORA requirements into controls that are engineered, tested, and continuously evidenced
- Building high-signal detections across cloud, Kubernetes, identity, endpoint, and SaaS telemetry
- Hardening our Kubernetes clusters and container supply chain, from build to admission to runtime, without slowing deploys
Our take
There is a lot for businesses to consider nowadays, as the evolution of the internet and technology is often hard to keep up with. Founded in 2023, Bastion is very new to the scene and sets out to enable companies to seamlessly integrate web3 infrastructure into enterprise technologies. The white-label platform uses a cost-effective product suite of tools (from custodial wallets to data analytics) for businesses to determine their on and off-chain products and further develop digital assets to better their consumers' experience.
Founded by two a16z Crypto C-suiters the platform combines the simplicity of web2 with the capabilities of web3. The company has enjoyed two impressive rounds of funding, and the premise looks promising. It will be really exciting to see how Bastion takes on competitors in the market and sets itself apart.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Sep 2025
$14.6m
EARLY VC
Sep 2023
$25m
SEED
Total funding: $39.6m
Company benefits
- Flexible work schedules
- Unlimited paid vacation & holidays
- Comprehensive health coverage
- Life insurance
- Retirement benefits
- Paid parental leave
- Tax-advantaged accounts
- One Medical
- Spring Health
- and more!
Company HQ
Civic Center, New York, NY
Leadership
Nassim Eddequiouaq
(Co-Founder)Previously worked in Security & Infrastructure, Blockchain at Facebook, and Chief Information Security Officer at Andreessen Horowitz.
Riyaz Faizullabhoy
(Co-Founder)Worked in Security & Infrastructure, Blockchain at Facebook and was CTO of Crypto at Andreessen Horowitz.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 1 more job at Bastion