Binance - Security Engineer (Python, CICD/AWS)
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• Build production-grade security applications and services using Python • Develop internal security platforms and tooling from scratch • Create security APIs and integrations with existing systems • Build automation to detect misconfigurations, enforce security baselines and automate security reviews and alerts • Design and implement AI-powered security integrations • Design and enforce secure cloud architectures (AWS) • Implement policy enforcement for IAM least-privilege models, secrets management (e.g., Vault, SSM, Sealed Secrets) and security groups and private networking • Secure CI/CD pipelines (GitHub Actions) to prevent secret leakage and enforce signed artifacts and immutable builds • Own code and artifact scanning: SAST / DAST, dependency & SBOM scanning, container image scanning • Define security gates that balance developer velocity and risk • Improve runtime security controls: detection of suspicious activity and abuse prevention • Policy enforcement in production • Partner with teams on threat modeling and secure design reviews • Support incident response and post-mortems from a security perspective • Drive continuous improvement from security incidents and near-misses • Lead technical aspects of security incident investigations • Strong experience in Infrastructure / Platform / Cloud Security • Advanced Python development skills (not just scripting—building production software) • Hands-on with CI/CD security tooling • Experience building security applications and platforms • Software design patterns and engineering best practices • Cloud platforms: AWS • CI/CD systems • Infrastructure as Code • Python software development (APIs, services, tooling) • Automation-first, not manual checklists • Strong communicator who can influence engineers • Comfortable operating in fast-moving, production environments • Software engineering mindset applied to security problems
Responsibilities
• Build production-grade security applications and services using Python • Develop internal security platforms and tooling from scratch • Create security APIs and integrations with existing systems • Build automation to detect misconfigurations, enforce security baselines and automate security reviews and alerts • Design and implement AI-powered security integrations • Design and enforce secure cloud architectures (AWS) • Implement policy enforcement for IAM least-privilege models, secrets management (e.g., Vault, SSM, Sealed Secrets) and security groups and private networking • Secure CI/CD pipelines (GitHub Actions) to prevent secret leakage and enforce signed artifacts and immutable builds • Own code and artifact scanning: SAST / DAST, dependency & SBOM scanning, container image scanning • Define security gates that balance developer velocity and risk • Improve runtime security controls: detection of suspicious activity and abuse prevention • Policy enforcement in production • Partner with teams on threat modeling and secure design reviews • Support incident response and post-mortems from a security perspective • Drive continuous improvement from security incidents and near-misses • Lead technical aspects of security incident investigations
Benefits
• Shape the future with the world’s leading blockchain ecosystem • Collaborate with world-class talent in a user-centric global organization with a flat structure • Tackle unique, fast-paced projects with autonomy in an innovative environment • Thrive in a results-driven workplace with opportunities for career growth and continuous learning • Competitive salary and company benefits • Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)