BitGo - Senior Offensive Security Engineer
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• 5+ years in offensive security, red teaming, advanced penetration testing, adversary simulation, or security research in modern production environments. We will consider less with an exceptional track record (published CVEs, top bug bounty results, CTF rankings, Code4rena/Sherlock audit placements, Black Hat / DEF CON / DARPA research). • 5+ years • Proven experience building or materially maturing an internal offensive security program — defining methodology, building tooling, and driving strategy — not just executing assessments. • Proven experience building or materially maturing • Digital asset security depth or strong demonstrated aptitude — custody infrastructure, transaction signing systems, wallet security, key management, MPC/TSS, or blockchain security research. • Digital asset security depth or strong demonstrated aptitude • Strong software engineering capability in Python, Go, TypeScript, or similar, including building custom offensive tooling. • Strong software engineering capability • Cloud-native fluency across AWS, containers, Kubernetes, IAM, secrets management, and CI/CD security. • Cloud-native fluency • Clear, credible written and verbal communication with engineers and senior leadership, with high judgment and a bias toward reducing real-world risk. • Clear, credible written and verbal communication • Strongly Preferred • Strongly Preferred • OSCP, OSWE, OSEP, GPEN, CPTS, or equivalent practical capability. • Experience assessing AI / agentic systems; proficiency with PyRIT, Garak, Promptfoo, or similar. • Experience building or deploying autonomous AI agents for offensive testing. • Open-source security contributions, published research, or conference talks (Black Hat, DEF CON, blockchain security venues). • Background in high-assurance financial, fintech, or regulated environments.
Responsibilities
• Own the offensive security program across BitGo's applications, APIs, cloud infrastructure, signing services, wallet-adjacent systems, identity pathways, and AI-enabled workflows. • Own the offensive security program • Run deep, hands-on assessments of Web3 and digital asset systems — transaction signing pipelines, MPC/TSS implementations, HSM integrations, multi-party approval workflows, smart-contract-connected services, and chain-facing infrastructure. • Run deep, hands-on assessments • Lead offensive testing of AI and agentic systems — prompt injection, unsafe tool use, data leakage, agentic identity/credential abuse, LLM routing flaws, and the OWASP Top 10 for LLM Applications. • Lead offensive testing of AI and agentic systems • Build continuous automated validation pipelines that run 24/7, leveraging autonomous AI agents for breadth while you focus on depth, creative adversary simulation, and novel attack chains. • Build continuous automated validation pipelines • Integrate offensive testing into CI/CD so every significant deployment to critical systems is validated before it reaches production. • Integrate offensive testing into CI/CD • Run purple-team exercises simulating nation-state TTPs and insider-threat scenarios, and progress from transparent to semi-stealth to full red team operations as the program matures. • Run purple-team exercises • Drive remediation and retesting with Engineering, AppSec, Cloud Security, Detection Engineering, and SecOps — and translate recurring patterns into durable architectural improvements. • Drive remediation and retesting • Serve as the internal expert on offensive risk in launch reviews, design reviews, and strategic initiatives, with authority to hold launches pending security validation of critical systems. • Serve as the internal expert on offensive risk
Benefits
• This is a career-defining opportunity. You will build an offensive security program from scratch at one of the most critical infrastructure providers in digital assets — with a direct line to the Deputy CISO, visibility to the CEO, and a path to leading a growing team during the most significant security transformation this industry has seen in a decade. • Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of open communication, collaboration, accountability, craftsmanship, and a client first approach. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want to be part of the team that changes the world’s financial markets.Here are some of the benefits of working at BitGo: • Competitive salary • IT equipment support for work • Meal & Commute allowance • Medical Insurance • Attractive Well-being allowance (comprises of medical, wellness and fitness aspects) • Snacks: on-the-house in the Bangalore office • Great/Talented workforce to learn and grow with • Note: This role requires working onsite (Monday to Friday) at the Bangalore office. • Note: • Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed finance.
Similar Jobs
No credit card. Takes 10 seconds.