Application Security Engineer

Responsibilities

• Assist in the development of automated security testing to validate secure coding best practices
• Participate in application security reviews and threat modeling, including secure code review and architectural design
• Perform application security vulnerability management and support the bug bounty program
• Facilitate the preparation of secure releases and support engineering teams with security best practices
• Drive security projects from ideation through to implementation
• Mature the security program using the NIST CSF framework
• Assist in relevant incident response activities
• Create and deliver secure development training

Requirements

• 5+ years of experience in application security
• 1-2 years of experience in software development and mobile security
• Familiarity with OWASP, static/dynamic analysis, and common security tools
• Understanding of network and web-related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS)
• Experience in the vulnerability management lifecycle
• Knowledge of cloud security controls and best practices
• Excellent professional communication skills with the ability to articulate complex topics clearly

Preferred Qualifications

• Proficiency in programming languages used at BitGo, such as TypeScript, Go, Python, Java, or Kotlin

Benefits

• Competitive salary
• IT equipment support
• Meal and commute allowance
• Medical insurance
• Attractive well-being allowance (medical, wellness, and fitness)
• On-site snacks in the Bangalore office
• Opportunity to work with a talented global workforce

About the Company

BitGo is the leading infrastructure provider of digital asset solutions, delivering custody, wallets, staking, trading, financing, and settlement services from regulated cold storage. As the operational backbone of the digital economy, BitGo serves thousands of institutions and millions of retail investors worldwide.