Security Engineer, Detection & Response

About Bastion

Bastion enables financial institutions and enterprises to issue regulated stablecoins, generate revenue on reserves, and expand their ecosystems. Bastion's platform combines stablecoin issuance, secure custody, and seamless orchestration for cross-border transfers, on / off-ramps, and stablecoin conversions. With Bastion's platform and APIs, businesses can create and scale their stablecoin network, while optimizing revenue, compliance, and control.

You can check out our Guide for Candidates here to learn more about our work.

Bastion is hiring a Detection & Response Security Engineer to be the second security team member, helping build the foundation for our incident response and threat detection programs. You'll lead the implementation of security tooling, write and tune alerts, contribute to IR playbooks, and collaborate with engineering to harden infrastructure and apps. This is a hands-on, high-impact role ideal for a builder who enjoys solving ambiguity and scaling security in fast-paced environments.

Responsibilities

• Develop and tune log-based detections across our AWS infrastructure, application stack, and CI / CD pipelines using CloudTrail, GuardDuty, and custom telemetry.
• Define detection coverage goals and lead threat modeling efforts across systems and services.
• Build and maintain incident response playbooks and participate in real-world incident investigations.
• Educate Bastion employees on secure engineering and operational practices through tailored trainings and documentation.
• Integrate security best practices into Bastion's infrastructure-as-code and CI / CD workflows to reduce risk by design.

Must Haves :

Nice to Haves :

What We Look For

Bastion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, and placement. Bastion participates in E-Verify to authorize eligibility of employment in the United States.