Security Engineer

About the Company

Responsibilities

• ● Participate in and drive our S-SDLC (Secure Software Development Lifecycle) program, including security requirements, secure code review, security testing, secure release, and ongoing security operations.
• ● Implement, operate, and optimize security platforms and policies, including SIEM, EDR, vulnerability management tools, Zero Trust, IAM, DLP, and WAF.
• ● Monitor and analyze logs and security alerts to detect, investigate, and respond to potential incidents. Perform initial triage, support incident classification and response, and contribute to post-incident reviews.
• ● Support vulnerability management and incident response: vulnerability monitoring and early warning, risk analysis, remediation coordination, retesting and verification, and closed-loop improvement.
• ● Support IT and security audits, including preparing and providing the evidence required by audit processes.
• ● Evaluate existing cybersecurity processes and recommend improvements to protect against external and internal threats, fraud, and theft.
• ● Partner with DevOps, IT, R&D, and business teams to align on risks and remediation plans, and provide security consulting, day-to-day security guidance, and risk assessments.

Requirements

• ● Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Information/Network Security, or a related field.
• ● 2+ years of experience in product/application security, security operations, or security engineering.
• ● Solid fundamentals in networking and operating systems, with a good understanding of common vulnerabilities and how to mitigate them.
• ● Hands-on experience with common security tools and platforms, and the ability to understand typical attack chains and interpret security alerts.
• ● Strong communication skills, with the ability to work effectively with stakeholders in both English and Chinese.
• ● Strong ownership: risk-aware, and able to track vulnerabilities and incidents through to closure.
• ● Strong collaboration: able to align with R&D, IT/Operations, and business teams on risks and remediation plans.
• ● Documentation and process mindset: able to turn experience into standards, SOPs, reports, and post-incident review materials.
• ● Strong learning ability: willing to close skill gaps through hands-on practice.
• ● Working knowledge of firewalls, IDS/IPS, VPNs, DDoS protection, and SOC operations is desirable.
• ● Experience in threat and vulnerability assessment, penetration testing, or forensic analysis is an advantage.
• ● Experience supporting IT or security audits is an advantage.

Benefits

• ● At BIT, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in search of intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem and in building a better product for the next one billion users.