Senior Application Security Architect at Binance

About the Role

As a Senior Application Security Architect at Binance, you will play a pivotal role in leading and shaping the security architecture of Binance's diverse products and services. Your primary responsibility will be to ensure the security by design of application systems, defining security requirements, and integrating robust security controls throughout the entire software development lifecycle. You will conduct comprehensive threat modeling, perform security reviews, and collaborate closely with development teams to embed security best practices from conception through deployment.

Responsibilities

• Lead the design and implementation of secure architectures for Binance's applications and systems.
• Define and enforce security requirements, standards, and guidelines across the organization.
• Conduct threat modeling and risk assessments to identify potential vulnerabilities and design effective mitigations.
• Perform security architecture reviews and provide expert guidance to engineering teams on secure coding practices and security control implementation.
• Collaborate with product, engineering, and operations teams to integrate security seamlessly into the SDLC.
• Evaluate and recommend new security technologies and solutions to enhance Binance's overall security posture.
• Develop and maintain security policies, procedures, and documentation.
• Mentor and guide junior security engineers, fostering a culture of security awareness.

Requirements

• A strong background with 8+ years of experience in application security, including significant experience in a security architecture role.
• Deep expertise in web application security, API security, mobile security, and cloud security principles (AWS, Azure, GCP).
• Proficiency in various security frameworks, standards, and best practices (e.g., OWASP Top 10, SANS Top 25, NIST).
• Hands-on experience with security tools and technologies, including SAST, DAST, IAST, SCA, WAF, and IDS/IPS.
• Solid understanding of cryptographic principles, authentication and authorization mechanisms (e.g., SAML, OAuth, OpenID Connect).
• Experience with containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Strong programming and scripting skills in at least one language such as Java, Python, Go, Rust, or C++.
• Excellent communication, collaboration, and leadership skills with the ability to influence and drive security initiatives.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Relevant security certifications (e.g., CISSP, CSSLP, GIAC) are a plus.
• Previous experience in the blockchain or cryptocurrency industry is advantageous.