Senior Application Security Architect

Binance seeks a Senior Application Security Architect to design and implement secure application architectures, conduct security audits, and ensure compliance with security standards. The role involves mentoring teams and collaborating with stakeholders.

Overview

Department

Job type

Full time

Compensation

Salary not specified

Location

Taiwan, East Asia

Resume Assistance

See how well your resume matches this job role with our AI-powered score. By uploading your resume, you agree to our Terms of Service

Click to upload

or drag and drop

pdf, doc, or docx (max. 10MB)

Ready to apply?

You're one step away - it takes less than a minute to upload your resume

Requirements

A bachelor's degree or above in computer science or a related field

More than 6 years of application security experience or software development, more than 10 years is preferred

Strong understanding and execution of software development principles and SDLC

Proficient in mainstream Web application development technology, Java-based tech stack is preferred

Proficient in the causes and solutions of OWASP TOP 10 security issues

Proficient in technical implementation of common security solutions

Understand the basic techniques of penetration testing and security testing

Familiar with the use of static security scanning tools for code, as well as problem analysis and solution design

Understand the basic knowledge of mobile and web security

Systematically grasp the formation mechanism of application security vulnerabilities and have the ability to design corresponding solutions (in line with industry best security practices)

Understand the thinking of threat modeling and attack surface analysis, actual combat experience is preferred

Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.

Ability to work independently and as part of a team.

Strong problem-solving and analytical skills.

Responsibilities

Design and implement secure application architectures, considering factors like authentication, authorization, data protection, and vulnerability management etc.

Develop and maintain secure coding guidelines and standards.

Conduct architectural / security requirement reviews to identify/assess potential security risks and mitigate security risks that may be caused by new products, new functions, bug fixes, etc.

Develop and implement security controls and countermeasures to mitigate identified risks.

Conduct regular security audits or penetration testing.

Ensure compliance with relevant security standards and regulations (e.g., OWASP).

Stay up-to-date with the latest security threats and vulnerabilities and incident in the community etc.

For the company's product business area, conduct pre-research to deep understand the business and reserve security tech research

Gradually form a basis for risk identification based on different products and security solution

Communicate security risks and recommendations to stakeholders.

Provide guidance and mentorship to the teams on security suggestions and secure coding practices.