Security Engineer, Application

About Bastion

Bastion enables financial institutions and enterprises to issue regulated stablecoins, generate revenue on reserves, and expand their ecosystems. Bastion's platform combines stablecoin issuance, secure custody, and seamless orchestration for cross-border transfers, on / off-ramps, and stablecoin conversions. With Bastion's platform and APIs, businesses can create and scale their stablecoin network, while optimizing revenue, compliance, and control.

You can check out our Guide for Candidates here to learn more about our work.

Bastion is seeking a Security Engineer to design and implement security architecture across our platform. As the second hire on Bastion's security team, you'll take ownership of application security across the stack, from threat modeling to production hardening. You'll help define core security processes (like vulnerability management and audits), and work closely with engineering to design secure-by-default systems. This role blends hands-on technical execution with broad strategic impact in a fast-moving fintech environment.

Responsibilities

• Define and implement security architecture across Bastion's backend and frontend systems.
• Drive threat modeling, secure code practices, and proactive vulnerability identification.
• Build and run Bastion's vulnerability management process, including triage and remediation of bug bounty reports.
• Lead third-party audits, ensure audit readiness, and generate customer-facing security reports.
• Serve as a security advisor to engineering teams, providing guidance on secure design and implementation patterns.
• Champion security culture through internal education and tooling.

Must Haves :

Nice to Haves :

What We Look For

Bastion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, and placement. Bastion participates in E-Verify to authorize eligibility of employment in the United States.