Overview
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by over 280 million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
Responsibilities
* Design and implement secure application architectures, considering authentication, authorization, data protection, and vulnerability management.
* Develop and maintain secure coding guidelines and standards.
* Conduct architectural and security requirement reviews to identify and mitigate potential security risks from new products, functions, or bug fixes.
* Develop and implement security controls and countermeasures to mitigate identified risks.
* Conduct regular security audits or penetration testing.
* Ensure compliance with relevant security standards and regulations (e.g., OWASP).
* Stay up-to-date with the latest security threats and vulnerabilities in the community.
* For the company’s product area, conduct pre-research to understand the business and reserve security tech research.
* Gradually form a basis for risk identification based on different products and security solutions.
* Communicate security risks and recommendations to stakeholders.
* Provide guidance and mentorship to teams on security practices and secure coding.
Requirements
* A bachelor’s degree or above in computer science or a related field.
* More than 6 years of application security experience or software development; more than 10 years is preferred.
* Strong understanding and execution of software development principles and SDLC.
* Proficient in mainstream web application development technology; Java-based stack is preferred.
* Proficient in the causes and solutions of OWASP Top 10 security issues.
* Proficient in the technical implementation of common security solutions.
* Understanding of basic penetration testing and security testing techniques.
* Familiar with static security scanning tools for code, problem analysis, and solution design.
* Basic knowledge of mobile and web security.
* Systematically understand the formation mechanism of application security vulnerabilities and be able to design corresponding solutions in line with industry best practices.
* Understanding threat modeling and attack surface analysis; actual experience is preferred.
* Bilingual English/Mandarin is required to coordinate with overseas partners and stakeholders.
* Ability to work independently and as part of a team.
* Strong problem-solving and analytical skills.
Why Binance
* Shape the future with the world’s leading blockchain ecosystem.
* Collaborate with world-class talent in a user-centric global organization with a flat structure.
* Tackle unique, fast-paced projects with autonomy in an innovative environment.
* Thrive in a results-driven workplace with opportunities for career growth and continuous learning.
* Competitive salary and company benefits.
* Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team).
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.
#J-18808-Ljbffr