Web3 Application Security Engineer

W Group; København; Sur place; DKK 700 000 - 900 000; Plein temps

Avantages offerts par ce poste

24 calendar days of paid leave

Additional days off for national holyd

Résumé du poste

WhiteBIT is shaping the new Web3 era and seeks an Application Security Engineer to protect our blockchain platform used by millions. You will perform thorough security assessments, review code, and drive secure development across our products.

You’ll triage bug bounty submissions, coordinate remediation, and help enforce security standards throughout the SDLC. Join a global fintech team focused on transparency, fast iteration, and secure architecture in a dynamic environment that values

Qualifications

• 2+ years of experience in Application Security, Product Security, or a related security role.
• Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices.
• Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing.
• Ability to review source code and identify security vulnerabilities.
• Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools.
• Understanding of CI/CD pipelines and experience integrating security checks into the SDLC.
• Knowledge of API security, authentication, authorization, and common security protocols.
• Familiarity with cloud, container, or Kubernetes security.
• Basic knowledge of Web3 and smart contract security.
• Basic scripting or programming skills, preferably in Python or another relevant language.
• Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders.

Responsabilités

• Perform application security assessments, source-code reviews, and penetration testing.
• Participate in threat modeling and security architecture reviews for new and existing products.
• Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess severity, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams.
• Identify, prioritize, and track vulnerabilities throughout the remediation process.
• Provide developers with clear remediation guidance and secure coding recommendations.
• Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines.
• Participate in defining and reviewing security requirements throughout the software development lifecycle.
• Validate security-tool findings and help reduce false positives.
• Support investigations and remediation of application-related security incidents.
• Contribute to application security standards, guidelines, and reusable security controls.
• Help deliver security training and promote secure development practices across engineering teams.
• Collaborate with developers, DevOps, QA, product teams, and other security specialists.
• Monitor emerging application security threats and contribute to improving AppSec processes.

Connaissances

Application Security

Threat Modeling

Security Architecture

Vulnerability Assessment

Penetration Testing

CI/CD Security

SAST

DAST

SCA

Cloud Security

Kubernetes Security

Python scripting

Communication skills

Ukrainian

English (B1)

Outils

Python

Description du poste

WhiteBIT is shaping the new Web3 era and seeks an Application Security Engineer to protect our blockchain platform used by millions. You will perform thorough security assessments, review code, and drive secure development across our products.

You’ll triage bug bounty submissions, coordinate remediation, and help enforce security standards throughout the SDLC. Join a global fintech team focused on transparency, fast iteration, and secure architecture in a dynamic environment that values