Security Engineer, Application - Bastion

About Bastion

Bastion enables financial institutions and enterprises to issue regulated stablecoins, generate revenue on reserves, and expand their ecosystems. Bastion’s platform combines stablecoin issuance, secure custody, and seamless orchestration for cross-border transfers, on/off-ramps, and stablecoin conversions. With Bastion’s platform and APIs, businesses can create and scale their stablecoin network, while optimizing revenue, compliance, and control.

Bastion is seeking a Security Engineer to design and implement security architecture across our platform. As the second hire on Bastion’s security team, you’ll take ownership of application security across the stack, from threat modeling to production hardening. You’ll help define core security processes (like vulnerability management and audits), and work closely with engineering to design secure-by-default systems. This role blends hands-on technical execution with broad strategic impact in a fast-moving fintech environment.

Responsibilities

• Define and implement security architecture across Bastion’s backend and frontend systems.

• Drive threat modeling, secure code practices, and proactive vulnerability identification.

• Build and run Bastion’s vulnerability management process, including triage and remediation of bug bounty reports.

• Lead third-party audits, ensure audit readiness, and generate customer-facing security reports.

• Serve as a security advisor to engineering teams, providing guidance on secure design and implementation patterns.

• Champion security culture through internal education and tooling.

Must Haves:

• Bachelor’s degree in Computer Engineering or a related field.

• 3+ years of experience in application or product security (startup or high-growth environment preferred)

• Proficiency in at least one of the following: Python, TypeScript, Rust, or Go.

• Experience designing and implementing security controls for web applications and APIs.

• Familiarity with vulnerability management and secure SDLC practices.

Nice to Haves:

• Experience in Web3 security, including blockchain infrastructure.

• Background in cryptographic systems or key management.

• Software engineering background with the ability to ship secure features when needed.

What We Look For

• Ownership and Proactivity: Demonstrated sense of ownership and accountability, combined with a forward-thinking approach and an unwavering motivation to excel in their designated role.

• Customer-Centric Mindset: Proven track record of placing customers at the heart of all decisions, striving beyond satisfaction to truly impress and exceed expectations.

• Detail-Oriented: Demonstrated ability to produce high-quality work with meticulous attention to detail, ensuring consistency and precision in every task.

• Team Player with a Competitive Edge: Strong collaboration skills, understanding that success is achieved collectively.

• Continuous Improvement Mindset: Never settle for the status quo. Always looking for growth opportunities and new challenges, with a vision of powering the future of web3. Recognizes that the journey to excellence is ongoing and embraces the challenge.

• Empathetic Insight: Demonstrated ability to understand and share the feelings of others, fostering genuine connections and promoting a supportive environment.

Bastion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, and placement. Bastion participates in E-Verify to authorize eligibility of employment in the United States.