Application Security Engineer at BitGo Inc.

<div class="content-intro"><p>BitGo is the leading infrastructure provider of digital asset solutions, delivering custody, wallets, staking, trading, financing, and settlement services from regulated cold storage. Since our founding in 2013, we have focused on enabling our clients to securely navigate the digital asset space. With a global presence and multiple Trust companies, BitGo serves thousands of institutions, including many of the industry's top brands, exchanges, and platforms, and millions of retail investors worldwide. As the operational backbone of the digital economy, BitGo handles a significant portion of Bitcoin network transactions and is the largest independent digital asset custodian, and staking provider, in the world. For more information, visit <a class="c-link" href="http://www.bitgo.com/" target="_blank" data-stringify-link="http://www.bitgo.com" data-sk="tooltip_parent">www.bitgo.com</a>.</p></div><p>We are looking for a versatile <strong>Application Security Engineer </strong>to join the team to continue to mature the application security practices at BitGo. This exciting opportunity empowers you to ensure vulnerabilities are prevented, or detected as early as possible. You get the opportunity to make a real and meaningful difference. We want you to focus on quality over noise. Automation over manual work. Your work would take place during regular business hours working with the local team. From time to time evening meetings will be necessary.</p> <p><strong>Responsibilities:</strong></p> <ul> <li>Assist in the development of automated security testing to validate that secure coding best practices are being used</li> <li>Assist in the creation and delivery of secure development training</li> <li>Participate in application security reviews and threat modeling, including secure code review, architectural design, and dynamic testing</li> <li>Perform application security vulnerability management</li> <li>Support the bug bounty program</li> <li>Facilitate and support the preparation of secure releases</li> <li>Support and consult with engineering teams in the area of application security and best practices</li> <li>Drive security projects from ideation to requirements to implementation</li> <li>Mature the security program through the use of the NIST CSF</li> <li>Assist in any relevant incident response activities</li> </ul> <p><strong>Skills & Experience: </strong></p> <p>We are looking for teammates who share and practice our values: open communication, transparency, taking ownership, and a high level of craftsmanship. We are looking for coworkers who share our vision and mission: deliver trust i