Web3 Senior Security Engineer

Hyphen Connect; Malaysia; Remote; MYR 80,000 - 120,000; Full time

Job summary

Hyphen Connect is seeking a talented Security Engineer to join their innovative team. You will be responsible for developing robust security solutions, mitigating risks, and collaborating with various teams to ensure a high-security posture. This role offers an exciting opportunity to shape security in a dynamic, decentralized trading environment. Strong InfoSec skills and cloud experience are essential, alongside a passion for security in the evolving Web3 space.

Qualifications

• Proven experience in application security or relevant field.
• Hands-on experience with public cloud environments.
• Understanding of container and DevSecOps concepts.

Responsibilities

• Architecting and managing security solutions.
• Enforcing security policies and responding to incidents.
• Participating in penetration testing and threat modelling.

Skills

Information Security

Application Security

Infrastructure-as-Code

Container and DevSecOps

Education

Professional certifications (OSCP, CISSP, etc.)

Job description

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offering institutional level systems and support whilst remaining on-chain and decentralised.

We are in search of a Security Engineer to join their vibrant team, where you will play a crucial role in pinpointing risks across the organisation. Collaborating with each team, you will focus on identifying, alerting, mitigating, and preventing risks. This role offers you the chance to contribute to shaping, constructing, and pioneering security solutions in a swiftly evolving industry.

What you’ll be doing:

• Architecting, implementing, and managing comprehensive security solutions.
• Establish and enforce security policies, standards, and guidelines that comply with industry regulations and best practices.
• Participate in penetration testing and purple teaming with ongoing or new projects to ensure their security posture is at a high level.
• Monitor and respond to security incidents, ensuring quick resolution.
• Build automation and leverage security frameworks with engineers that are able to improve security and reduce friction.
• Take part in critical discussion topics, with the ability to challenge decisions and the status quo; we take collaboration and feedback seriously, believing it is one of the foundational principles of a great team.

What we’re looking for:

• Strong Information Security (InfoSec) skills, with proven experience in application security or a relevant field.
• Hands-on experience of developing, engineering, or architecting within a public cloud environment.
• Experience with engineering, using infrastructure-as-code (such as Terraform and Ansible).
• Experience with performing threat modelling exercises or a very good understanding of the methodology and ability to assess a project's risk.
• Understanding of container and DevSecOps concepts (we use DefectDojo) with CI/CD experience.
• Familiarity with blockchain technology and cryptocurrency trading platforms.

Bonus Points:

• Professional certifications such as OSCP, CISSP, CDP & CMTP.
• Experience with IT security frameworks such as SOC 2 and ISO 27001.

#LI-REMOTE

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Website

Working Location *

EMEA - Europe

APAC - Asia Pacific

LATIN - Latin America

UAE

Others

Do you have any Web3 experience? * Select...

Web3 Vertical Experience *

Defi

NFT

Gamefi

Infrastructure

ZK

Exchanges

VC

Chain

DePin

Accelerator

Incubator

Trading

Asset Management

Others

Any personal experience in Web3 (e.g. side project, personal investment) if no professional experience. *