Bastion

Security Engineer

• Join Bastion's security team as its second engineer, reporting to the CTO/CISO and working alongside the Staff Security Engineer
• Scale the security program across security engineering, infrastructure, product and application security, detection and response, and technical GRC
• Write production Go code, review design documents, and build reusable security tooling and middleware
• Learn and contribute to Bastion's Go codebase, AWS and Kubernetes environment, SIEM, and security services
• Ship security fixes, guardrails, and detections to production
• Learn incident response and on-call procedures and join the security rotation
• Contribute to the DLP program rollout
• Own a security domain such as Kubernetes and cloud hardening, application security in CI, or detection engineering
• Write and tune detections as code, add telemetry sources, and reduce alert noise
• Build reusable Go security libraries or middleware for authorization, tenant isolation, request signing, or input validation
• Review design documents for new product features and architecture changes
• Deliver control automation and audit evidence for SOC 1, SOC 2, and OCC workstreams
• Help launch and triage the bug bounty program and expand DLP coverage and policies
• Drive multi-quarter initiatives involving service-to-service networking, security policy evaluation, and granular access
• Expand Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection
• Expand compliance automation, conduct resilience testing, influence the security roadmap, and improve secure development and deployment practices

Product Manager

• Own the Shared Services vertical, foundational capabilities on which other product areas depend
• Turn ambiguous, compliance-heavy problems into clear, sequenced, shippable work
• Own the roadmap, requirements, compliance checkpoints, quality bar, and stakeholder communication
• Map the Shared Services surface area, current state, and delivery risks
• Partner with Engineering, Compliance, and GTM; establish escalation paths
• Own requirements for compliance-critical workstreams and create engineer-ready specifications
• Establish triage cadence for incoming requirements and issues
• Ship or unblock customer-gating milestones
• Own the roadmap end to end, including themes, sequencing, milestones, and compliance checkpoints
• Run planning, triage, risk tracking, and stakeholder updates
• Drive requirements and delivery across concurrent regulated workstreams
• Define and track compliance checkpoints with Compliance
• Communicate status, risks, and tradeoffs across product verticals
• Build instrumentation and feedback loops for repeatable prioritization and compliance tracking
• Institutionalize requirements, triage, and checkpoint practices
• Anticipate regulatory and customer obligations
• Reduce recurring Engineering load through better sequencing and reusable capabilities
• Address identity and due-diligence flows, third-party risk controls, regulatory reporting, travel-rule requirements, and stablecoin infrastructure tradeoffs