Application Security Engineer

About the role

BitGo is a digital‑asset infrastructure company delivering custody, wallets, staking, trading and more. We are looking for a versatile Application Security Engineer to mature our application security practices and ensure vulnerabilities are prevented or detected as early as possible.

Key responsibilities

• Develop automated security testing to validate secure coding best practices.
• Create and deliver secure development training.
• Participate in application security reviews, threat modeling, secure code review, architectural design and dynamic testing.
• Manage application security vulnerabilities and support the bug bounty program.
• Facilitate secure releases and consult engineering teams on security best practices.
• Drive security projects from ideation through implementation.
• Mature the security program using the NIST CSF.
• Assist with incident response activities as needed.

Required profile

• 5+ years of experience in application security.
• 1‑2 years of experience in software development and mobile security.
• Familiarity with common security libraries, controls and typical security flaws.
• Experience with OWASP, static and dynamic analysis tools.
• Basic understanding of network and web protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS).
• Experience in the vulnerability management lifecycle.
• Knowledge of cloud security controls and best practices.
• Proven ability to work with developers and communicate complex topics clearly.

Required skills

• OWASP
• Static analysis
• Dynamic analysis
• Security libraries and controls
• Network protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS)
• Cloud security controls
• TypeScript
• Go
• Python
• Java
• Kotlin

What we offer

• Competitive salary
• IT equipment support for work
• Meal and commute allowance
• Medical insurance
• Well‑being allowance covering medical, wellness and fitness
• Snacks provided on‑site at the Bangalore office
• Opportunity to learn and grow with a talented workforce