Design and implement secure application architectures, perform security requirement reviews, develop secure coding standards, run security audits/penetration tests, implement controls and remediation, conduct threat modeling and risk identification, and mentor engineering teams on secure coding and security best practices.
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
Responsibilities
- Design and implement secure application architectures, considering factors like authentication, authorization, data protection, and vulnerability management etc.
- Develop and maintain secure coding guidelines and standards.
- Conduct architectural / security requirement reviews to identify/assess potential security risks and mitigate security risks that may be caused by new products, new functions, bug fixes, etc..
- Develop and implement security controls and countermeasures to mitigate identified risks.
- Conduct regular security audits or penetration testing.
- Ensure compliance with relevant security standards and regulations (e.g., OWASP).
- Stay up-to-date with the latest security threats and vulnerabilities and incident in the community etc.
- For the company's product business area, conduct pre-research to deep understand the business and reserve security tech research
- Gradually form a basis for risk identification based on different products and security solution
- Communicate security risks and recommendations to stakeholders.
- Provide guidance and mentorship to the teams on security suggestions and secure coding practices.
Requirements
- A bachelor's degree or above in computer science or a related field
- More than 6 years of application security experience or software development, more than 10 years is preferred
- Strong understanding and execution of software development principles and SDLC
- Proficient in mainstream Web application development technology, Java-based tech stack is preferred
- Proficient in the causes and solutions of OWASP TOP 10 security issues
- Proficient in technical implementation of common security solutions
- Understand the basic techniques of penetration testing and security testing
- Familiar with the use of static security scanning tools for code, as well as problem analysis and solution design
- Understand the basic knowledge of mobile and web security
- Systematically grasp the formation mechanism of application security vulnerabilities and have the ability to design corresponding solutions (in line with industry best security practices)
- Understand the thinking of threat modeling and attack surface analysis, actual combat experience is preferred
- Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.
- Ability to work independently and as part of a team.
- Strong problem-solving and analytical skills.
Why Binance
• Shape the future with the world’s leading blockchain ecosystem
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle unique, fast-paced projects with autonomy in an innovative environment
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.
Similar Jobs
HR Tech • Information Technology • Professional Services • Consulting
Contract Math Expert to produce high-quality answers and "golden responses" for undergraduate and graduate mathematics prompts. Responsibilities include analysing complex problems, writing clear structured explanations, reviewing and refining model answers, collaborating with remote experts, and meeting format, quality, and timeliness requirements. Flexible 15–40 hour weekly commitment for a 3–6 month contract.
Artificial Intelligence • Fintech • Software • Automation
Lead and mentor a Southeast Asia engineering team; ensure code quality and testing; drive project progress; define integrations strategy; design, build, and maintain third-party integrations; align engineering efforts with product and leadership.
Top Skills:
Aws ServerlessFastapiLambdaPostgresPythonReact
Artificial Intelligence • Fintech • Software • Automation
Drive simplification and automation of tax operations for a B2B SaaS product. Gather requirements, launch automation features, partner with engineering, design, and operations, and integrate third-party tools to deliver end-to-end solutions.
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
