Security Engineer
Summary
An experienced cybersecurity engineer owning BTCC's overall security posture: hardening infrastructure, triaging and responding to incidents, embedding SAST/DAST/SCA into CI/CD, and enforcing security policies. Emphasizes networking, FortiGate firewalls, IPSec/SSL VPNs, endpoint protection on Linux/Windows, AWS/Azure, and blockchain/digital-asset-exchange security.
About the role
We are seeking an experienced Cybersecurity Engineer to join our team and take ownership of the company's overall security posture.
Key responsibilities
Design, develop, implement, and lead various security technologies, controls, and tools across enterprise environments
Actively participate in the evaluation, hardening, and patching of security systems and core infrastructure
Monitor, triage, investigate, and respond to potential security incidents, alerts, and breaches
Partner with business leaders, Product Managers, DevOps, IT Operations, and Software Engineering teams to provide technical cybersecurity guidance and support
Identify security gaps, missing controls, and vulnerabilities, delivering actionable recommendations for remediation and system improvement
Implement and manage automated security tools within CI/CD pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)
Formulate, roll out, and enforce organizational security policies, standards, and industry best practices
Qualifications & Experience
3–5 years of hands-on experience in cybersecurity / information security
In-depth understanding of computer networking principles and core IT / security fundamentals
Prior experience in the Web3 / Crypto industry is strongly preferred
Solid domain knowledge in blockchain security, ideally serving as a Subject Matter Expert (SME) for digital asset exchanges and/or hot/cold wallet security architectures
Practical administration experience with enterprise firewalls (FortiGate strongly preferred)
Hands-on experience configuring and managing IPSec VPN tunnels (on-premises to cloud infrastructure) and SSL VPNs for client/remote access
Experience deploying, configuring, and managing endpoint protection across both Linux and Windows environments (e.g., Microsoft Defender for Endpoint, Sophos EDR, CrowdStrike Falcon)
Strong grasp of incident handling lifecycle, methodologies, and real-time containment/triage
Architecture and security posture management experience across AWS and/or Azure
Practical operational experience with Edge protection, WAF, and DDoS mitigation platforms (e.g., Cloudflare, Akamai)
