Binance14mo ago

Security Engineer (Python)

AsiaRemoteFull-time: Remotemid

SecurityIT & AdministrationSecurity EngineerCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users.

Technical Tools

SecurityIT & AdministrationSecurity EngineerCybersecurity

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

We are looking for a Security Engineer to own and continuously improve the security posture of our cloud infrastructure, CI/CD pipelines, and production systems.

This is a deeply technical role focused on preventative security, secure-by-default platforms, and automation-first controls — working closely with Platform, DevOps, and Engineering teams. You'll design and operate security tooling across cloud infrastructure, Kubernetes, and CI/CD pipelines, with a strong emphasis on building production-grade security software using Python.

Build production-grade security applications and services using Python

Develop internal security platforms and tooling from scratch

Create security APIs and integrations with existing systems

Build automation to detect misconfigurations, enforce security baselines and automate security reviews and alerts

Design and implement AI-powered security integrations

Design and enforce secure cloud architectures (AWS)

Implement policy enforcement for IAM least-privilege models, secrets management (e.g., Vault, SSM, Sealed Secrets) and security groups and private networking

Secure CI/CD pipelines (GitHub Actions) to prevent secret leakage and enforce signed artifacts and immutable builds

Own code and artifact scanning: SAST / DAST, dependency & SBOM scanning, container image scanning

Define security gates that balance developer velocity and risk

Improve runtime security controls: detection of suspicious activity and abuse prevention

Policy enforcement in production

Partner with teams on threat modeling and secure design reviews

Support incident response and post-mortems from a security perspective

Drive continuous improvement from security incidents and near-misses

Lead technical aspects of security incident investigations

Strong experience in Infrastructure / Platform / Cloud Security

Advanced Python development skills (not just scripting—building production software)

Hands-on with CI/CD security tooling