Senior Application Security Architect

Binance

Hong Kong +1 more

On-site

Who this role is best for

Strong fit for experienced application security professionals who design secure architectures and lead security initiatives, with a focus on blockchain and cryptocurrency domains, and who can work in a remote-first arrangement across multiple geographic locations.

Best fit for

Candidates with 10+ years of application security experience and deep knowledge of OWASP standards
— “more than 6 years of application security experience or software development, more than 10 years is preferred”
Individuals who can bridge technical security practices with business understanding and coordinate globally
— “Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.”
Professionals with experience in threat modeling and attack surface analysis for secure product design
— “Understand the thinking of threat modeling and attack surface analysis, actual combat experience is preferred”

Things to consider

The role demands a high level of technical autonomy and initiative in identifying and mitigating risks
— “Gradually form a basis for risk identification based on different products and security solution”

How to stand out

Highlight your ability to design secure architectures with examples from past projects involving authentication and data protection
— “Design and implement secure application architectures, considering factors like authentication, authorization, data protection, and vulnerability management etc.”
Showcase your expertise in OWASP TOP 10 issues with clear, technical solutions and mitigation strategies
— “Proficient in the causes and solutions of OWASP TOP 10 security issues”
Emphasize your experience in conducting security audits and penetration testing for complex systems
— “Conduct regular security audits or penetration testing.”
Demonstrate your capability to lead and mentor teams in secure coding practices and risk communication
— “Provide guidance and mentorship to the teams on security suggestions and secure coding practices.”

Pace · SteadyCollaboration · MediumAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

Design and implement secure application architectures
Develop and maintain secure coding guidelines and standards
Conduct security audits and penetration testing
Ensure compliance with relevant security standards and regulations

Typical background

6+ years of application security experience or software developmentStrong understanding of software development principles and SDLC

Skills & requirements

Required

Application Security ArchitectureSecure Coding GuidelinesSecurity Audits And Penetration TestingOwasp StandardsStatic Security Scanning ToolsMobile And Web SecurityApplication Security Vulnerabilities

Preferred

Java-based Tech StackPenetration Testing ExperienceThreat Modeling And Attack Surface Analysis

Stack & domain

Application SecuritySecure Coding GuidelinesObservability ToolsJavaOwaspPenetration TestingStatic Security Scanning ToolsMobile And Web SecurityApplication Security VulnerabilitiesLeadershipCommunicationProblem-solvingAnalytical SkillsCollaborationAdaptabilityAccountabilityDecision MakingCryptocurrency ExchangeFinancial SecuritySoftware Development

About the role

Original posting from Binance via Greenhouse

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, and more. Our mission is to increase the freedom of money and financial access for people around the world.
Responsibilities
Design and implement secure application architectures, considering factors like authentication, authorization, data protection, and vulnerability management etc.
Develop and maintain secure coding guidelines and standards.
Conduct architectural / security requirement reviews to identify/assess potential security risks and mitigate security risks that may be caused by new products, new functions, bug fixes, etc..
Develop and implement security controls and countermeasures to mitigate identified risks.
Conduct regular security audits or penetration testing.
Ensure compliance with relevant security standards and regulations (e.g., OWASP).
Stay up-to-date with the latest security threats and vulnerabilities and incident in the community etc.
For the company's product business area, conduct pre-research to deep understand the business and reserve security tech research
Gradually form a basis for risk identification based on different products and security solution
Communicate security risks and recommendations to stakeholders.
Provide guidance and mentorship to the teams on security suggestions and secure coding practices.
Requirements
A bachelor's degree or above in computer science or a related field
More than 6 years of application security experience or software development, more than 10 years is preferred
Strong understanding and execution of software development principles and SDLC
Proficient in mainstream Web application development technology, Java-based tech stack is preferred
Proficient in the causes and solutions of OWASP TOP 10 security issues
Proficient in technical implementation of common security solutions
Understand the basic techniques of penetration testing and security testing
Familiar with the use of static security scanning tools for code, as well as problem analysis and solution design
Understand the basic knowledge of mobile and web security
Systematically grasp the formation mechanism of application security vulnerabilities and have the ability to design corresponding solutions (in line with industry best security practices)
Understand the thinking of threat modeling and attack surface analysis, actual combat experience is preferred
Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.
Ability to work independently and as part of a team.
Strong problem-solving and analytical skills.
Why Binance
Shape the future of finance
Collaborate with world-class talent in a user-centric global organization with a flat structure
Tackle challenging projects in a fast-paced and innovative enviornment with autonomy
Thrive in a results-driven workplace with opportunities for career growth and continuous learning
Competitive salary and company benefits
Remote-first, work-from-home arrangement (may vary depending on the nature of the role and team)
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you acknowledge that you have read our Candidate Privacy Notice.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Source: Binance careers (Greenhouse)