Security Engineer, Application

Bastion

full-time

Posted on: 9/24/2025

Origin: • 🇺🇸 United States • New York

✨ AI Apply

💰 $215,000 per year

Mid-LevelSenior

GoPythonRustSDLCTypeScriptWeb3

About the role

Define and implement security architecture across Bastion’s backend and frontend systems
Drive threat modeling, secure code practices, and proactive vulnerability identification
Build and run Bastion’s vulnerability management process, including triage and remediation of bug bounty reports
Lead third-party audits, ensure audit readiness, and generate customer-facing security reports
Serve as a security advisor to engineering teams, providing guidance on secure design and implementation patterns
Champion security culture through internal education and tooling
Take ownership of application security across the stack, from threat modeling to production hardening
Define core security processes (vulnerability management, audits) and work closely with engineering

Bachelor’s degree in Computer Engineering or a related field
3+ years of experience in application or product security (startup or high-growth environment preferred)
Proficiency in at least one of: Python, TypeScript, Rust, or Go
Experience designing and implementing security controls for web applications and APIs
Familiarity with vulnerability management and secure SDLC practices
Experience leading vulnerability management, triage, and bug bounty remediation
Experience with third-party security audits and audit readiness
Ability to advise engineering teams on secure design and implementation patterns
Champion security culture through internal education and tooling
Willingness to commute to NYC 2-3 days per week (may be based in NYC office)
Authorized to work in the United States; company participates in E-Verify
Consent to criminal background check (offers contingent on passing)
Nice to have: Web3 security or blockchain infrastructure experience
Nice to have: Background in cryptographic systems or key management
Nice to have: Software engineering background with ability to ship secure features