Senior Offensive Security Engineer

Responsibilities

• Own the end-to-end offensive security program across applications, APIs, cloud infrastructure, and AI-enabled workflows.
• Conduct deep, hands-on assessments of Web3 and digital asset systems, including MPC/TSS implementations and transaction signing pipelines.
• Lead offensive testing of AI and agentic systems, focusing on prompt injection, data leakage, and LLM routing flaws.
• Build continuous automated validation pipelines and integrate offensive testing into CI/CD workflows.
• Execute purple-team exercises simulating nation-state TTPs and insider-threat scenarios.
• Drive remediation efforts by partnering with Engineering, AppSec, and Cloud Security teams to implement durable architectural improvements.

Requirements

• 5+ years of experience in offensive security, red teaming, or advanced penetration testing.
• Proven track record of building or maturing an internal offensive security program.
• Deep knowledge of digital asset security, including custody infrastructure, wallet security, or blockchain research.
• Strong software engineering skills in Python, Go, or TypeScript for building custom offensive tooling.
• Cloud-native fluency with AWS, Kubernetes, containers, and IAM.
• Excellent written and verbal communication skills for interacting with engineers and senior leadership.

Preferred Qualifications

• Relevant certifications such as OSCP, OSWE, OSEP, GPEN, or CPTS.
• Experience assessing AI systems using tools like PyRIT, Garak, or Promptfoo.
• Experience building or deploying autonomous AI agents for security testing.
• Background in exploit development, reverse engineering, or browser security.
• Experience working in high-assurance financial or regulated fintech environments.

Benefits

• Competitive salary
• IT equipment support
• Meal and commute allowance
• Medical insurance
• Attractive well-being allowance (medical, wellness, and fitness)
• On-site snacks at the Bangalore office
• Opportunity to work with a talented global workforce

About the Company

BitGo is the leading infrastructure provider of digital asset solutions, delivering custody, wallets, staking, trading, financing, and settlement services. As the operational backbone of the digital economy, BitGo serves thousands of institutions and millions of retail investors worldwide, handling a significant portion of Bitcoin network transactions.