Senior Application Security Architect

Binance; Hong Kong; On-site; HKD 800,000 - 1,100,000; Full time

Benefits offered by this job

Remote-first environment

Job summary

Binance, a leading global blockchain ecosystem and crypto exchange, is seeking an experienced Application Security Engineer. You will design secure architectures, set coding standards, and guide teams on threat modeling and secure practices across products. Strong English/Mandarin, Java expertise, and deep OWASP knowledge are essential.

Join a fast-paced, remote-first environment with global stakeholders. You will mentor colleagues, conduct audits, and shape security controls for new features in

Qualifications

• Bachelor's degree or above in computer science or a related field.
• 6+ years of application security or software development; 10+ years preferred.
• Strong understanding of software development principles and SDLC.
• Proficient in Java-based web development.
• Proficient in OWASP Top 10 security issues and mitigations.
• Experience implementing security solutions.
• Understanding penetration testing techniques and security testing.
• Familiar with static security scanning tools and problem-solving.
• Knowledge of mobile and web security fundamentals.
• Threat modeling and attack surface analysis; practical experience preferred.
• Fluent English and Mandarin to coordinate with overseas partners.

Responsibilities

• Design and implement secure application architectures with strong authentication and data protection.
• Develop and maintain secure coding guidelines and standards.
• Review architecture/security requirements to identify and mitigate risks for new products.
• Develop and implement security controls and countermeasures.
• Conduct regular security audits or penetration testing.
• Ensure compliance with OWASP and relevant standards.
• Stay up-to-date with latest security threats and vulnerabilities.
• For product areas, conduct pre-research to understand business and security tech research.
• Form a basis for risk identification based on products and security solutions.
• Communicate security risks and recommendations to stakeholders.
• Provide guidance and mentorship on secure coding practices.

Skills

Application security

Secure SDLC

Threat modeling

Penetration testing basics

Team collaboration

Bilingual English/Mandarin

Education

Bachelor's degree in computer science or related field

Tools

Static security scanning tools

Job description

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, and more. Our mission is to increase the freedom of money and financial access for people around the world.

Responsibilities

• Design and implement secure application architectures, considering factors like authentication, authorization, data protection, and vulnerability management etc.
• Develop and maintain secure coding guidelines and standards.
• Conduct architectural / security requirement reviews to identify/assess potential security risks and mitigate security risks that may be caused by new products, new functions, bug fixes, etc..
• Develop and implement security controls and countermeasures to mitigate identified risks.
• Conduct regular security audits or penetration testing.
• Ensure compliance with relevant security standards and regulations (e.g., OWASP).
• Stay up-to-date with the latest security threats and vulnerabilities and incident in the community etc.
• For the company's product business area, conduct pre-research to deep understand the business and reserve security tech research
• Gradually form a basis for risk identification based on different products and security solution
• Communicate security risks and recommendations to stakeholders.
• Provide guidance and mentorship to the teams on security suggestions and secure coding practices.

Requirements

• A bachelor's degree or above in computer science or a related field
• More than 6 years of application security experience or software development, more than 10 years is preferred
• Strong understanding and execution of software development principles and SDLC
• Proficient in mainstream Web application development technology, Java-based tech stack is preferred
• Proficient in the causes and solutions of OWASP TOP 10 security issues
• Proficient in technical implementation of common security solutions
• Understand the basic techniques of penetration testing and security testing
• Familiar with the use of static security scanning tools for code, as well as problem analysis and solution designUnderstand the basic knowledge of mobile and web security
• Systematically grasp the formation mechanism of application security vulnerabilities and have the ability to design corresponding solutions (in line with industry best security practices)
• Understand the thinking of threat modeling and attack surface analysis, actual combat experience is preferred
• Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.
• Ability to work independently and as part of a team.
• Strong problem-solving and analytical skills.

Why Binance

• Shape the future of finance
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle challenging projects in a fast-paced and innovative enviornment with autonomy
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Remote-first, work-from-home arrangement (may vary depending on the nature of the role and team)

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you acknowledge that you have read our Candidate Privacy Notice.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.