Senior Application Security Expert
You will strengthen the funds and blockchain security of a global crypto exchange, focusing on securing exchange systems, wallets, big data platforms, and market-making infrastructure, while also leading smart contract auditing and blockchain threat governance. You'll analyze web service logs and APIs, ideally leveraging AI, and build monitoring and defense mechanisms to protect funds. You will identify and mitigate risks across the transaction lifecycle using big data and machine learning, audit smart contracts for vulnerabilities, and research blockchain attack vectors to develop detection rules and on-chain monitoring tools.
Responsibilities
- Lead application security governance for core systems (trading, wallet, big data risk analysis, market-making)
- Analyze web service logs and APIs, preferably with AI
- Build monitoring and defense mechanisms for funds security; define baselines, compliance strategies, and incident response plans
- Identify and mitigate risks across the transaction lifecycle; apply big data/ML
- Audit and automate detection of smart contract vulnerabilities
- Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools
Requirements
- Bachelor's degree or above in Computer Science, Information Security, Cryptography, or related field
- 5+ years of experience in application security, blockchain security, or financial risk control; exchange/fintech background preferred
- Strong knowledge of exchange funds flow logic and application security frameworks
- Hands-on experience with smart contract auditing tools (e.g., Slither, Mythril, Echidna, Foundry)
- Skilled in big data analysis & risk modeling (Spark, Elasticsearch, Graph DB, ML-based anomaly detection)
- Strong offensive/defensive security mindset, cross-team collaboration skills, and ability to drive governance into practice
- Proficient in English; able to follow cutting-edge blockchain security research