Job Responsibilities
- Security System Architecture: Design and implement the security framework for the DEX platform, encompassing fund security, network security, application security, and key management modules.
- Fund Security Assessment: Conduct security assessments and hardening for critical fund-related components (wallets, Vaults, deposits, withdrawals). This includes smart contract code auditing, penetration testing, security risk discovery, and overall security evaluation.
- Smart Contract Auditing: Oversee and manage the smart contract security auditing process, coordinating with and following up on remediation with overseas third-party audit teams.
- Security Training and Awareness: Develop and deliver security training programs to enhance awareness for development, operations, and business teams.
- Threat Research: Proactively track emerging blockchain security trends, research new attack vectors, and develop corresponding protection solutions.
Job Requirements
- Education & Experience: Bachelor's degree or higher in Computer Science, Information Security, or a related field, with 5+ years of relevant security work experience.
- Communication Skills: Fluent in English (reading, writing, speaking, listening) with the ability to communicate independently with international teams. Must be proficient in technical documentation and meeting presentations.
- Security Background: Proven experience in security operations or application security, with familiarity in building and running security systems and processes.
- Traditional Security Fundamentals: Experience across multiple traditional security domains:
- Application Security: Expertise in common vulnerabilities (OWASP Top 10, Injection, XSS, CSRF), including code auditing, penetration testing, and general security testing.
- Cybersecurity: Knowledge of defensive measures such as DDoS Protection, WAF/CDN implementation, and secure networking (VPN/Zero Trust).
- Security Operations (SecOps): Familiarity with SIEM, log analysis, incident response protocols, and vulnerability management.
Hands-on Security Skills:
- Code Auditing: Proficient in code review for languages like Go, Java, and JavaScript, capable of identifying vulnerabilities such as command execution, injection flaws, and privilege escalation.
- Penetration Testing: Ability to independently plan and execute security tests using common tools and methodologies.
- Cloud & DevSecOps: Familiarity with cloud security practices (AWS/Kubernetes), including IAM, KMS, and container security. Knowledgeable in DevSecOps principles, such as CI/CD security access control, image signing, and code scanning.
- Security Architecture: Demonstrated experience in building security systems, including the design and implementation of security solutions.
