--- title: 'Senior Security Engineer at Bastion' canonical: 'https://feeny.ai/job/senior-security-engineer-bastion-united-states-edhm47s3y4dw' type: 'job' last_seen: '2026-10-16' --- # Senior Security Engineer at Bastion - **Company:** Bastion - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-01 - **Last confirmed live:** 2026-10-16 - **Apply:** https://jobs.ashbyhq.com/bastion/4be68829-84ef-489c-adf0-863ee7603cbc ## Job description ## About Bastion Bastion provides the regulated infrastructure businesses need to hold, move, and issue stablecoins. Our platform combines custodial wallets, global payment orchestration, and stablecoin issuance. Customers can use each product independently or connect them into a single end-to-end flow. We operate through our own regulated entities, with compliance and risk controls built directly into the platform. We can also support customers operating under their own licenses with the compliance and financial operations required to run their programs. ## Overview We're looking for a hands-on Senior Security Engineer to join our security team as its second engineer. You'll work alongside our Staff Security Engineer and report to our CTO/CISO. The foundation is already in place: a SOC 2 Type II report, conditional approval from the OCC for a national trust charter, a SIEM and detection pipeline, runtime security for Kubernetes, and time-limited, auditable access to production. You'll help scale that program across security engineering, infrastructure, product and application security, detection and response, and the technical side of GRC (SOC 1, SOC 2, OCC, and MiCA/DORA). As a 40-person company, your work will directly protect our users and partners. You'll build on a strong foundation (we're featured in this [AWS case study](https://aws.amazon.com/startups/learn/transforming-payments-how-startups-are-pioneering-stablecoin-infrastructure-on-aws?lang=en-US#overview)). Our platform is almost entirely Go, running on Kubernetes (EKS) in AWS and managed with Terraform, and our security services are written in Go too. You must be able to write production code. Expect to spend most of your time writing code, reviewing design docs, and building security tooling and middleware that engineers can easily drop into any service. This role can be remote within the US, though we'd prefer someone in NYC or open to relocating. Work to Be Done Instead of a list of requirements, we want to give you a directional look into the first 30, 90, and 180 days on the job. We are a startup, so the pace is fast and the specific work will change. People who thrive here find ways to contribute in their first week and are fully productive by their third month. You need to be okay with that. If you think this is something you can handle, we'll be excited to speak with you. First 30 days: Learn and ship from week one - Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services - Contribute security feedback to at least one engineering design doc - Ship your first security fix, guardrail, or detection to production - Learn our incident response and on-call procedures, and join our security rotation - Get up to speed on our DLP program and start contributing to its rollout - Outcomes - Production code shipped in your first month - Join the security on-call rotation, so the team has real coverage By 90 days: Own initiatives independently - Own at least one security domain end to end, such as Kubernetes and cloud hardening, application security in CI, or detection engineering - Write and tune detections as code, add new telemetry sources, and reduce alert noise - Ship your first reusable security library or middleware in Go (for example authorization, tenant isolation, request signing, or input validation) and get it adopted by at least one service team - Be the security reviewer on design docs for new product features and architecture changes - Deliver control automation and evidence for an active audit or regulatory workstream (SOC 1, SOC 2, OCC) - Help launch and triage our bug bounty program, and grow our DLP coverage and policies - Outcomes - Measurable risk reduction from controls, fixes, or detections you built - Recognized as the owner of at least one security domain By 180 days: Scale your impact - Drive multi-quarter initiatives such as default-deny service-to-service networking, security policy evaluation, or just-in-time, granular access across more systems - Expand our Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection - Grow a shared set of security middleware and libraries that is adopted across the codebase, so the secure path is the easy path for our Go engineers - Help expand our compliance scope with automation instead of spreadsheets - Turn tabletop exercises and resilience testing into concrete fixes - Join cross-functional planning and influence the security roadmap - Outcomes - Function-wide improvements to how we build and ship secure systems - Clear, measurable business impact from your security work Some challenges you might tackle - Building reusable security building blocks that make secure defaults easy across our platform - Protecting the critical systems at the core of a regulated stablecoin platform - Turning OCC and MiCA/DORA requirements into controls that are engineered, tested, and continuously evidenced - Building high-signal detections across cloud, Kubernetes, identity, endpoint, and SaaS telemetry - Hardening our Kubernetes clusters and container supply chain, from build to admission to runtime, without slowing deploys If you think this is something you can handle, we will be excited to speak with you. Bastion provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, and placement. Bastion participates in E-Verify to authorize eligibility of employment in the United States. ## About Bastion ## Company Overview - **One-liner**: Bastion provides regulated, compliance-first stablecoin infrastructure that enables enterprises to issue, custody, move, and convert stablecoins globally without becoming a regulated financial institution themselves. - **Entity Type**: Private (Seed stage; $39.6M total raised) - **Headquarters**: Palo Alto, California, United States - **Founded**: 2023 - **Founders**: Nassim Eddequiouaq (Co-Founder & CEO) ## Core Business - **Primary industry**: Regulated stablecoin infrastructure and digital asset financial services - **Target customers**: Enterprise and institutional clients — financial institutions, global corporations, fintech platforms, neobanks, and multi-entity businesses that need to integrate stablecoins without building their own regulated infrastructure. - **Mission or purpose statement**: "Unlocking the full utility of stablecoins" by removing the regulatory, compliance, and technical barriers that prevent enterprises from using stablecoins for money movement. ## Products & Services - **Stablecoin Issuance and Management**: Full-stack solution to launch a branded, USD-backed stablecoin. Covers issuance technology, banking integrations, compliance programs, reserve management, and reporting. Best suited for financial institutions and global corporations that want to capture reserve economics. - **Custodial Wallet Solutions**: Institutional-grade custodial wallets with Cloud HSM and AWS Nitro Enclave-based key management. Includes a policy engine for custody, orchestration, and settlement. Offered under Bastion’s own MTLs and MSB. - **Global Payments & Commerce (Payment Corridors)**: Fiat-to-stablecoin and stablecoin-to-stablecoin conversions across 60+ countries with multi-currency support. Built-in compliance and sanctions screening on every corridor. Powers retail payments, subscriptions, in-app purchases, remittances, and embedded retail wallets. - **Treasury and Capital Optimization**: Accelerates settlement, reduces idle cash, and enables 24/7 cross-border money movement. Designed for treasury teams, multi-entity enterprises, and businesses with significant cross-border capital flows. - **Single API Platform**: Access all products through one integration with built-in compliance checks, monitoring, screening, and direct connections to banking and liquidity partners. ## Market Standing - **Valuation/Market Cap**: Not publicly available - **Key Metric**: Total funding of $39.6M across two seed rounds - **Notable Investors/Partners**: Coinbase Ventures (led second seed round), plus at least 12 other investors across both rounds; partnerships with licensed banking and liquidity partners - **Growth Signals**: - Acquired Dibbs Trust Company in February 2025, gaining a New York limited purpose trust company charter from NYDFS - Currently applying to convert that charter into a national trust bank charter - 33 employees as of mid-2026 (+92% year-over-year growth) - Headcount growth of +23 people in the last year - 490 active wallets on platform - 99.9% platform uptime - 6 open job postings across engineering, infrastructure, and brand roles ## Competitive Advantages - **Regulatory moat**: Operates as a regulated trust company under NYDFS (Bastion Platforms Trust Company, LLC) and holds multiple state MTLs — giving enterprises regulated infrastructure without them needing to become banks themselves. - **Compliance-first architecture**: KYC, KYB, AML, sanctions screening, Travel Rule, and transaction monitoring are natively built into the tech stack, not retrofitted after the fact. - **Institutional security**: Leverages Cloud HSMs and AWS Nitro Enclaves for key management, ensuring no single point of compromise. - **Non-compete positioning**: Unlike some infrastructure providers, Bastion does not issue its own competing stablecoin or lock customers into proprietary ecosystems — it operates purely as an infrastructure partner. - **Proven team**: The founding and executive team has directly launched USD-backed stablecoins at global scale, architected institutional custody for tens of billions in digital assets, and built compliance programs at top global financial institutions. ## Strategic Focus - Expanding its national trust bank charter to broaden regulated capabilities across the United States - Scaling global payment corridors (currently covering 60+ countries) with multi-currency and multi-jurisdiction support - Deepening single-API platform to make stablecoin integration seamless for enterprises across issuance, custody, conversion, and settlement - Maintaining a compliance-first product strategy that prioritizes regulatory integrity alongside product velocity ## Why Work Here - **Small, ambitious team**: Bastion describes itself as "a small, ambitious team of engineers and builders who believe the best financial tools have yet to be built" — offering high ownership and impact for early employees. - **Technical depth**: Engineering team works on cutting-edge infrastructure combining regulated finance, cryptography (Cloud HSMs, AWS Nitro Enclaves), smart contract governance, and global payments. - **Global footprint**: Presence across the United States (Palo Alto HQ), New Zealand, Switzerland, and Uganda — suggesting distributed/remote-friendly culture. - **Growth trajectory**: Headcount grew 92% in the last year, and the company is actively hiring across senior engineering, infrastructure, and brand roles — a signal of scaling phase. - **Mission-driven work**: Opportunity to build the regulated backbone of stablecoin infrastructure at a time when stablecoins are becoming a mainstream financial primitive. - **Active job postings**: As of mid-2026, open roles include Senior Software Engineer, Senior Infrastructure Engineer, and Brand and Communications Lead. ## Sources 1. [bastion.com](https://www.bastion.com/) 2. [bastion.com/careers](https://www.bastion.com/careers) 3. [LinkedIn - Bastion](https://www.linkedin.com/company/bastionplatforms) 4. [CB Insights - Bastion](https://www.cbinsights.com/company/bastion-5) 5. [jobs.ashbyhq.com - Bastion](https://jobs.ashbyhq.com/Bastion) ## Other roles at Bastion - [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-bastion-new-york-mdh1j9m31vwj) — New York, NY - [Enterprise Sales Director](https://feeny.ai/job/enterprise-sales-director-bastion-new-york-s8e7fd6hexvs) — New York, NY - [Open Application](https://feeny.ai/job/open-application-bastion-united-states-h0qyfg57wcdj) — United States - [Business Development Director](https://feeny.ai/job/business-development-director-bastion-united-states-c842rax2yrys) — United States - [Director of Partnerships](https://feeny.ai/job/director-of-partnerships-bastion-united-states-cz81vzpjyyrs) — United States - [Account Manager](https://feeny.ai/job/account-manager-bastion-united-states-fnfsk9932kp9) — United States - [Payment Operations Associate](https://feeny.ai/job/payment-operations-associate-bastion-united-states-mytkxqxq1t0w) — United States - [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-qube-research-technologies-london-1tmh1ythpq6k) — London, United Kingdom - [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-supercell-helsinki-5c0gyawbrwes) — Helsinki, Finland - [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-clarity-innovations-remote-f8sbf4sgc2xx)