Bastion - Senior Security Engineer

• Own at least one security domain end to end, such as Kubernetes and cloud hardening, application security in CI, or detection engineering • Write and tune detections as code, add new telemetry sources, and reduce alert noise • Ship your first reusable security library or middleware in Go (for example authorization, tenant isolation, request signing, or input validation) and get it adopted by at least one service team • Be the security reviewer on design docs for new product features and architecture changes • Deliver control automation and evidence for an active audit or regulatory workstream (SOC 1, SOC 2, OCC) • Help launch and triage our bug bounty program, and grow our DLP coverage and policies • Measurable risk reduction from controls, fixes, or detections you built • Recognized as the owner of at least one security domain • Drive multi-quarter initiatives such as default-deny service-to-service networking, security policy evaluation, or just-in-time, granular access across more systems • Expand our Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection • Grow a shared set of security middleware and libraries that is adopted across the codebase, so the secure path is the easy path for our Go engineers • Help expand our compliance scope with automation instead of spreadsheets • Turn tabletop exercises and resilience testing into concrete fixes • Function-wide improvements to how we build and ship secure systems • Clear, measurable business impact from your security work • Some challenges you might tackle • Building reusable security building blocks that make secure defaults easy across our platform • Protecting the critical systems at the core of a regulated stablecoin platform • Turning OCC and MiCA/DORA requirements into controls that are engineered, tested, and continuously evidenced • Building high-signal detections across cloud, Kubernetes, identity, endpoint, and SaaS telemetry • Hardening our Kubernetes clusters and container supply chain, from build to admission to runtime, without slowing deploys • If you think this is something you can handle, we will be excited to speak with you.