We are looking for a versatile SOC analyst to join the team and write, tune and respond to alerts covering the entire environment from endpoints to cloud infrastructure. This exciting opportunity empowers you to ensure the right alerts come in and you don’t burn out on false positives. We are a forward thinking organization that leverages AI. Your work would take place during regular business hours. Weekend coverage will be necessary. From time to time evenings as well. The expectation is that we build for 24x7 coverage but you will be asked to step in to assist the team.

Responsibilities:

• Review and triage security alerts from a wide variety of sources across the organization
• Carefully tune rules to reduce false positives
• Write new rules to ensure appropriate MITRE ATT&CK framework coverage
• Escalate potential incidents
• Assist in any incident response activities
• Ability to run projects from beginning to end
• Work with Engineering and IT on visibility coverage and detection       

Qualifications:

• 2+ years responding to alerts
• Familiar with MITRE ATT&CK framework
• Comfortable writing and tuning detection rules
• Experience triaging alerts and establishing if an event rises to an incident
• Varied exposure to a variety of application, SaaS, cloud and end point logs
• Strong communication skills towards technical and non-technical people
• Preference for people who have experienced a real life security incident that they detected                   

If you are interested in this opportunity, please apply with your resume and cover letter. We are an equal opportunity employer and welcome all qualified candidates to apply.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the world’s financial markets.

Here are some of the benefits* of working at BitGo:

• Competitive base salary, bonus and stock options
• 100% company paid health insurance for employee, partner and dependents
• Up to 4% 401k company match
• Paid parental leave, Paid vacation
• Free commuter/parking pass; 5 min from Caltrain
• Free custom lunches, dinners and snacks 
• Computer equipment and workplace furniture to suit your needs
• Great colleagues and inspiring startup environment
• *Benefits may vary based on location 

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed investing.

Pay Transparency Notice: Depending upon your leveling and location, the compensation for this role averages between $115,000 - $145,000 USD base salary. Equity, an annual performance bonus and the benefits outlined below are also a part of this role's package.

We are looking for a versatile SOC analyst to join the team and write, tune and respond to alerts covering the entire environment from endpoints to cloud infrastructure. This exciting opportunity empowers you to ensure the right alerts come in and you don’t burn out on false positives. We are a forward thinking organization that leverages AI. Your work would take place during regular business hours. Weekend coverage will be necessary. From time to time evenings as well. The expectation is that we build for 24x7 coverage but you will be asked to step in to assist the team.

Responsibilities:

• Review and triage security alerts from a wide variety of sources across the organization
• Carefully tune rules to reduce false positives
• Write new rules to ensure appropriate MITRE ATT&CK framework coverage
• Escalate potential incidents
• Assist in any incident response activities
• Ability to run projects from beginning to end
• Work with Engineering and IT on visibility coverage and detection       

Qualifications:

• 2+ years responding to alerts
• Familiar with MITRE ATT&CK framework
• Comfortable writing and tuning detection rules
• Experience triaging alerts and establishing if an event rises to an incident
• Varied exposure to a variety of application, SaaS, cloud and end point logs
• Strong communication skills towards technical and non-technical people
• Preference for people who have experienced a real life security incident that they detected                   

If you are interested in this opportunity, please apply with your resume and cover letter. We are an equal opportunity employer and welcome all qualified candidates to apply.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the world’s financial markets.

Here are some of the benefits* of working at BitGo:

• Competitive base salary, bonus and stock options
• 100% company paid health insurance for employee, partner and dependents
• Up to 4% 401k company match
• Paid parental leave, Paid vacation
• Free commuter/parking pass; 5 min from Caltrain
• Free custom lunches, dinners and snacks 
• Computer equipment and workplace furniture to suit your needs
• Great colleagues and inspiring startup environment
• *Benefits may vary based on location 

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed investing.

Pay Transparency Notice: Depending upon your leveling and location, the compensation for this role averages between $115,000 - $145,000 USD base salary. Equity, an annual performance bonus and the benefits outlined below are also a part of this role's package.

We are looking for a versatile Application Security Engineer to join the team to continue to mature the application security practices at BitGo. This exciting opportunity empowers you to ensure vulnerabilities are prevented, or detected as early as possible. You get the opportunity to make a real and meaningful difference. We want you to focus on quality over noise. Automation over manual work. Your work would take place during regular business hours working with the local team. From time to time evening meetings will be necessary.

Responsibilities:

• Assist in the development of automated security testing to validate that secure coding best practices are being used
• Assist in the creation and delivery of secure development training
• Participate in application security reviews and threat modeling, including secure code review, architectural design, and dynamic testing
• Perform application security vulnerability management
• Support the bug bounty program
• Facilitate and support the preparation of secure releases
• Support and consult with engineering teams in the area of application security and best practices
• Drive security projects from ideation to requirements to implementation
• Mature the security program through the use of the NIST CSF
• Assist in any relevant incident response activities

Skills & Experience: 

We are looking for teammates who share and practice our values: open communication, transparency, taking ownership, and a high level of craftsmanship. We are looking for coworkers who share our vision and mission: deliver trust in digital assets. 

Required:

• 5+ years of experience with application security
• 1-2 years of experience in software development and mobile security
• Familiarity with common security libraries, security controls, and common security flaws.
• Experience with OWASP, static/dynamic analysis, and common security tools
• A basic understanding of network and web related protocols (such as TCP/IP, UDP, IPSEC, HTTP, HTTPS, protocols)
• Experience in vulnerability management lifecycle
• Familiarity with cloud security controls and best practices
• Experience working with developers
• Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner
• Preference for candidates who know some of the programming languages in use at BitGo - TypeScript, Go, Python, Java, Kotlin           

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of open communication, collaboration, accountability, craftsmanship, and a client first approach. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want to be part of the team that changes the world’s financial markets.

Here are some of the benefits of working at BitGo:

• Competitive salary
• IT equipment support for work
• Meal & Commute allowance
• Medical Insurance
• Attractive Well-being allowance (comprises of medical, wellness and fitness aspects)
• Snacks: on-the-house in the Bangalore office
• Great/Talented workforce to learn and grow with

Note: This role requires working onsite (Monday to Friday) at the Bangalore office.

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed finance.

We are hiring a Senior Offensive Security Engineer to build, run, and mature BitGo's offensive security program end-to-end across AI, Web2, and Web3. This is not a point-in-time pentesting role. You will own program strategy, assessment execution, tooling and automation (including AI-powered offensive agents), reporting, remediation validation, retesting, and continuous improvement — moving BitGo from periodic external tests to an always-penetration-testing posture.

What You'll Do

• Own the offensive security program across BitGo's applications, APIs, cloud infrastructure, signing services, wallet-adjacent systems, identity pathways, and AI-enabled workflows.
• Run deep, hands-on assessments of Web3 and digital asset systems — transaction signing pipelines, MPC/TSS implementations, HSM integrations, multi-party approval workflows, smart-contract-connected services, and chain-facing infrastructure.
• Lead offensive testing of AI and agentic systems — prompt injection, unsafe tool use, data leakage, agentic identity/credential abuse, LLM routing flaws, and the OWASP Top 10 for LLM Applications.
• Build continuous automated validation pipelines that run 24/7, leveraging autonomous AI agents for breadth while you focus on depth, creative adversary simulation, and novel attack chains.
• Integrate offensive testing into CI/CD so every significant deployment to critical systems is validated before it reaches production.
• Run purple-team exercises simulating nation-state TTPs and insider-threat scenarios, and progress from transparent to semi-stealth to full red team operations as the program matures.
• Drive remediation and retesting with Engineering, AppSec, Cloud Security, Detection Engineering, and SecOps — and translate recurring patterns into durable architectural improvements.
• Serve as the internal expert on offensive risk in launch reviews, design reviews, and strategic initiatives, with authority to hold launches pending security validation of critical systems.

What We're Looking For

• 5+ years in offensive security, red teaming, advanced penetration testing, adversary simulation, or security research in modern production environments. We will consider less with an exceptional track record (published CVEs, top bug bounty results, CTF rankings, Code4rena/Sherlock audit placements, Black Hat / DEF CON / DARPA research).
• Proven experience building or materially maturing an internal offensive security program — defining methodology, building tooling, and driving strategy — not just executing assessments.
• Digital asset security depth or strong demonstrated aptitude — custody infrastructure, transaction signing systems, wallet security, key management, MPC/TSS, or blockchain security research.
• Strong software engineering capability in Python, Go, TypeScript, or similar, including building custom offensive tooling.
• Cloud-native fluency across AWS, containers, Kubernetes, IAM, secrets management, and CI/CD security.
• Clear, credible written and verbal communication with engineers and senior leadership, with high judgment and a bias toward reducing real-world risk.

Strongly Preferred

• OSCP, OSWE, OSEP, GPEN, CPTS, or equivalent practical capability.
• Experience assessing AI / agentic systems; proficiency with PyRIT, Garak, Promptfoo, or similar.
• Experience building or deploying autonomous AI agents for offensive testing.
• Browser security, modern web exploitation, exploit development, or reverse engineering background.
• Open-source security contributions, published research, or conference talks (Black Hat, DEF CON, blockchain security venues).
• Background in high-assurance financial, fintech, or regulated environments.

Why This Role

This is a career-defining opportunity. You will build an offensive security program from scratch at one of the most critical infrastructure providers in digital assets — with a direct line to the Deputy CISO, visibility to the CEO, and a path to leading a growing team during the most significant security transformation this industry has seen in a decade.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of open communication, collaboration, accountability, craftsmanship, and a client first approach. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want to be part of the team that changes the world’s financial markets.

Here are some of the benefits of working at BitGo:

• Competitive salary
• IT equipment support for work
• Meal & Commute allowance
• Medical Insurance
• Attractive Well-being allowance (comprises of medical, wellness and fitness aspects)
• Snacks: on-the-house in the Bangalore office
• Great/Talented workforce to learn and grow with

Note: This role requires working onsite (Monday to Friday) at the Bangalore office.

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed finance.

Partnering with BitGo Legal Department to build a global privacy program and execution for all internal and external privacy needs and requests. Privacy is an explicit, designated Security responsibility. BitGo is global and needs a single, accountable owner to operationalize privacy, reduce reliance on contractors, and meet regulatory requirements.

This role will require being full-time onsite at our New York City office to support collaborative team dynamics and innovative problem-solving.

What you would do

• Run privacy request operations end-to-end

• Serve as the Data Protection Officer where required by law

• Lead the preparation and submission of mandatory data protection impact assessments (DPIAs) and/or privacy risk assessments (PRAs) to supervisory authorities when required by law.

• Partner with Legal in lock step

• Build and maintain core privacy program governance (lean but audit-ready)

• Vendor and procurement privacy

• Personal data incident support

• Metrics and continuous improvement

What success would look like (first 6 months)

• A single global intake and case workflow is live, with documented triage rules, deadlines, templates, and evidence retention.
• Contractor reliance is materially reduced for routine privacy requests and program maintenance.
• Data inventory and processing records are maintained and used in real workflows (requests, product reviews, vendor reviews).
• Privacy reviews are embedded into product and vendor change processes with predictable turnaround.
• Executive-ready metrics exist and show improving cycle time and decreasing backlog.

Required qualifications

• 7 or more years with proven ability to build and run a privacy program with operational responsibility and hands-on execution of privacy requests at scale.
• Demonstrated ability to operate as a high-autonomy individual contributor in a lean environment.
• Strong experience partnering with attorneys and translating legal requirements into operational controls.
• Working knowledge of global privacy regulatory expectations, including but not limited to GLBA, GDPR, CCPA/CPRA, LGPD, PIPEDA, and how to implement them in practical workflows.
• Strong technical fluency: systems, data flows, access control concepts, logging, and incident handling collaboration.
• Oversee the formal creation and maintenance of the Record of Processing Activities (ROPA), including its periodic review and updates to ensure compliance with Article 30 of the GDPR (or equivalent local mandates).
• Excellent writing and documentation discipline (regulator-ready and audit-ready records).

Preferred qualifications

• Prior experience formally serving as a Data Protection Officer.
• Experience in financial services, payments, custody, or other highly regulated environments.
• Experience building privacy workflows in ticketing and documentation systems and producing evidence packages for audits and regulators.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the world’s financial markets.

Pay Transparency Notice: Depending upon your leveling and location, the compensation for this role averages between $140,000 - $165,000 USD base salary. Equity, an annual performance bonus and the benefits outlined below are also a part of this role's package. 

Here are some of the benefits* of working at BitGo:

• Competitive base salary, bonus and stock options
• 100% company paid health insurance for employee, partner and dependents
• Up to 4% 401k company match
• Paid parental leave, Paid vacation
• Free commuter/parking pass
• Free custom lunches, dinners and snacks 
• Computer equipment and workplace furniture to suit your needs
• Great colleagues and inspiring startup environment

*Benefits may vary based on location 

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and you’ll be able to look back and say you were part of the team that transformed investing.