Head of Security Engineering, Bastion
$240-300k
Offers Equity
Web3 intergration platform
Be an early applicant
Web3 intergration platform
1-20 employees
Be an early applicant
$240-300k
Offers Equity
1-20 employees
Company mission
To enable the next generation of web3 interactions for businesses, that feel like web2.
Role
Who you are
- Instead of a list of requirements, we want to give you a directional look into the first 7/15/30/90 Days
- If you think this is something you can handle, we will be excited to speak with you
- 7 days — Rapid orientation and decision velocity
- Meet key stakeholders to understand business goals and risk appetite
- Review current security posture, tooling, processes, and identified risks
- Confirm incident response coverage and escalation paths
- Deliver an initial readout with near-term priorities
- By day 15 - Unblock and set the operating rhythm
- Define Bastion’s security north star and success metrics in alignment with leadership
- Establish an operating cadence (standups, intake, prioritization, communication loops)
- Kick off 1-2 high‑impact risk‑reduction efforts
- Identify key compliance and policy gaps
- By day 30 - Ship visible progress and reduce risk
- Partner with Platform and App teams to implement baseline engineering guardrails
- Validate core detection and response workflows through a tabletop exercise
- Publish a simple dashboard for key security KPIs
- Launch lightweight enablement for engineers and security champions
- Begin interviewing candidates for your future team
- By day 90 - Scale impact and prove durability
- Formalize security policies and governance rhythms with cross‑functional partners
- Ship at least one security improvement that measurably improves developer velocity or reduces friction
- Demonstrate measurable risk reduction against agreed KPIs
- Define the next two quarters of the security roadmap and resourcing plan
- Run a resilience exercise and fold learnings into continuous improvement
What the job involves
- We are looking for a player-coach Head of Security to build and lead our security engineering function at a critical growth stage
- In this role, you’ll be hands-on with our security infrastructure while establishing the strategic foundation for our security program
- You'll work closely with our compliance and risk teams to ensure our stablecoin platform meets the highest security standards, balancing technical excellence with the regulatory rigor our industry demands
- This is an opportunity to shape security culture at a 32-person company, where your decisions will directly impact our ability to scale safely and maintain the trust of our users and partners
- You will inherit a strong foundation (see this AWS case study that includes us) and be able to add at least 1 security engineer to your team in Q1 2026
- It is highly likely that you have setup a security program before - knowing how to prioritize your work and setting high standards
- Given our industry, it is highly preferred that you have experience working with regulatory and compliance teams, as well as experience with product security and detection and response
- This role balances hands-on security engineering (implementing controls, building detection capabilities) with establishing and enhancing governance frameworks and working closely with compliance teams
- You'll need to be comfortable both writing code and writing policies that satisfy auditors
- We are open to this role being based remotely in the United States, though there is an advantage to being based (or willing to relocate) to NYC
- Build and maintain a security program that meets regulatory standards
- Own compliance and regulator readiness across SOC 2 and NYDFS
- Drive product security and detection and response across the lifecycle
- Oversee day‑to‑day IT and endpoint operations until the team is staffed
- Maintain access policies and endpoint security standards
- Manage network access controls and zero‑trust posture
- Evolve SIEM detection and alerting strategy
- Lead execution of current security priorities, including CloudHSM readiness and annual obligations
Our take
There is a lot for businesses to consider nowadays, as the evolution of the internet and technology is often hard to keep up with. Founded in 2023, Bastion is very new to the scene and sets out to enable companies to seamlessly integrate web3 infrastructure into enterprise technologies. The white-label platform uses a cost effective product suite of tools (from custodial wallets to data analytics) for businesses to determine its on and off-chain products and further develop digital assets to better their consumers experience.
Founded by two a16z Crypto C-suiters the platform combines the simplicity of web2 with the capabilities of web3. The company acquired an impressive seed round of funding and the premise looks promising. It will be really exciting to see how Bastion takes on competitors in the market and set themselves apart.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Sep 2025
$14.6m
EARLY VC
Sep 2023
$25m
SEED
Total funding: $39.6m
Company benefits
- Flexible work schedules
- Unlimited paid vacation & holidays
- Comprehensive health coverage
- Life insurance
- Retirement benefits
- Paid parental leave
- Tax-advantaged accounts
- One Medical
- Spring Health
- and more!
Company HQ
Civic Center, New York, NY
Leadership
Nassim Eddequiouaq
(Co-founder)Previously worked in Security & Infrastructure, Blockchain at Facebook, and Chief Information Security Officer at Andreessen Horowitz.
Riyaz Faizullabhoy
(Co-founder)Worked in Security & Infrastructure, Blockchain at Facebook and was CTO of Crypto at Andreessen Horowitz.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job