Infrastructure Security Engineer (DevSecOps)

Binance is the leading global blockchain ecosystem and cryptocurrency infrastructure provider whose suite of financial products includes the world’s largest digital-asset exchange.

Our mission is to accelerate cryptocurrency adoption and increase the freedom of money.

If you’re looking for a fast-paced, mission-driven organization where opportunities to learn and excel are endless, then Binance is the place for you.

We are looking for a seasoned Infrastructure Security Engineer (DevSecOps) professional to join our ranks and help us to secure and automate our platform. The ideal candidate can not only handle complex technical challenges, but also have the ability to make things simple and intuitive. You should have an aptitude for identifying technical debt and the ability to standardize processes and systems in zero-trust fashion.

In this role, you will be responsible for leading the design and implementation of security solutions for our cloud-based infrastructure. You will work closely with other teams to ensure our services are secure and compliant with industry best practices.

Responsibilities:

- Implement new, and update existing security measures for the protection of Binance.com infrastructure

- Generate primitives (AMI, Bastion Instance, Air Gapped deployment, etc) for secure infrastructure

- Utilize log ingestion platform for security analytics and identification of tactics, techniques and patterns of attackers

- Provides solutions to audited access, risk assessments in permission escalation, and vulnerability assessments

- Build models for anomaly detection and identify on-going pen testing

The ideal candidate for this role will have:

- A strong background with AWS or other cloud technologies

- Deep expertise with GNU/ Linux systems

- Previous development experience, preferably in Python, JavaScript or Go

- Experience with security automation and continuous integration/continuous delivery (CI/CD) pipelines, including experience with Github ActionsFamiliarity with cloud-native security tools and practices, such as Secrets management, runtime protection, and network segmentation

- Experience with security best practices and services in cloudExperience with containerization technologies, such as Docker and Kubernetes

- Strong problem-solving and analytical skills

- Proficiency in Mandarin in order to liaise with mandarin-speaking counterparts and stakeholders

Bonus points:

- Extensive experience with Hashicorp Terraform

- Experience with security tools and technologies, such as vulnerability scanners, security compliance frameworks and static/dynamic analysis

- A deep understanding of security best practices, including secure infrastructure, security automation, and DevSecOps methodologies

As a Infrastructure Security Engineering professional at Binance, you will have the opportunity to work on some seriously cool projects and make a real impact on the security of our platform.

We are looking for team members who are passionate about security, DevSecOps and excited to be a part of a fast-paced, innovative organization.

Working at Binance

• Be a part of the world’s leading blockchain ecosystem that continues to grow and offers excellent career development opportunities

• Work alongside diverse, world-class talent in an environment where learning and growth opportunities are endless

• Tackle fast-paced, challenging and unique projects

• Work in a truly global organization, with international teams and a flat organizational structure

• Competitive salary and benefits

• Flexible working hours, remote-first, and casual work attire

Learn more about how Binancians embody the organization’s core values, creating a unified culture that enables collaboration, excellence, and growth.

Apply today to be a part of the Web3 revolution!

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.