Senior Application Security Architect

About Binance

Binance stands as a premier global blockchain ecosystem, operating the world's largest cryptocurrency exchange in terms of trading volume and registered users. Trusted by over 300 million users across more than 100 countries, it is recognized for its industry-leading security, transparent management of user funds, rapid trading engine, deep liquidity, and a comprehensive range of digital asset products. Binance's suite of offerings includes trading, finance, education, research, payments, institutional services, and Web3 innovations, all aimed at empowering financial inclusion and advancing monetary freedom worldwide.

Responsibilities

• Architect and develop secure application frameworks focusing on authentication, authorization, data safeguarding, and vulnerability control.
• Establish and uphold secure coding standards and guidelines.
• Perform architectural and security requirement assessments to detect and mitigate potential security threats linked to new products, features, or fixes.
• Design and introduce security measures to reduce identified risks.
• Carry out periodic security audits and penetration testing activities.
• Ensure adherence to applicable security protocols and regulations, such as OWASP standards.
• Keep abreast of emerging security threats, vulnerabilities, and incidents within the cybersecurity community.
• Conduct preliminary research within product lines to understand business needs and inform security technology research.
• Develop frameworks for risk identification tailored to diverse products and security solutions.
• Effectively communicate security risks and recommended actions to relevant stakeholders.
• Offer mentorship and guidance to teams regarding security best practices and secure coding techniques.

Requirements

• Bachelor's degree or higher in computer science or a related discipline.
• Over six years of experience in application security or software development; preference for candidates with more than ten years.
• Deep knowledge and practical application of software development lifecycles and principles.
• Expertise in mainstream web application development technologies, with a preference for Java-based technology stacks.
• Proficient understanding and resolution strategies of OWASP TOP 10 security vulnerabilities.
• Skilled in implementing common security solutions from a technical standpoint.
• Familiarity with penetration and security testing fundamentals.
• Experience using static security analysis tools for code review, including problem diagnosis and solution formulation.
• Basic knowledge of mobile and web application security practices.
• Comprehensive understanding of application security vulnerability mechanisms and the capability to design compliant security solutions aligned with industry best practices.
• Insight into threat modeling and attack surface analysis, preferably with real-world experience.
• Fluency in both English and Mandarin to effectively engage with international partners and stakeholders.
• Ability to function independently and collaboratively within teams.
• Strong analytical and problem-solving capabilities.

Why Join Binance?

• Play a key role in shaping the future within the leading blockchain ecosystem globally.
• Collaborate with elite professionals in a user-focused, flat organizational structure.
• Engage with unique, fast-moving projects autonomously in an innovative environment.
• Benefit from a results-oriented workplace fostering career advancement and continuous learning.
• Receive competitive remuneration and comprehensive company benefits.
• Flexible remote working arrangements, potentially varying per business team needs.

Equal Opportunity and Privacy

Binance is dedicated to equal employment opportunities and values workforce diversity as central to its success. Applicants agree to privacy terms upon submission and acknowledge potential use of AI-assisted tools in recruitment to support, but not replace, human decision-making. Final employment choices are made by human recruiters. For further details on data processing, contact the company directly.