AppSec Engineer: Web3 Security Innovator

WhiteBIT; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

24 days paid leave

Additional holidays

Job summary

WhiteBIT, a fintech platform with a global team of over 1,200 professionals, is building the Web3 era. We protect more than 8 million users worldwide and partner with leaders like VISA and FC Barcelona.

We are seeking an Application Security Engineer to strengthen our product security across cloud, containers, and APIs. You will perform security assessments, threat modeling, and code reviews, helping to integrate secure practices into the SDLC and CI/CD workflows.

Qualifications

• 2+ years of experience in Application Security or related role.
• Strong knowledge of web application security and OWASP Top 10.
• Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing.
• Ability to review source code and identify security vulnerabilities.
• Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools.
• Understanding of CI/CD pipelines and security checks in SDLC.
• Knowledge of API security, authentication, authorization, and security protocols.
• Familiarity with cloud, container, or Kubernetes security.
• Basic scripting in Python or similar language.
• Ability to communicate security risks and remediation guidance to stakeholders.

Responsibilities

• Perform application security assessments, source-code reviews, and penetration testing.
• Participate in threat modeling and security architecture reviews for products.
• Triage Bug Bounty submissions: validate, reproduce, assess severity, communicate with researchers, coordinate remediation.
• Identify, prioritize, and track vulnerabilities through remediation.
• Provide developers with clear remediation guidance and secure coding recommendations.
• Support security tooling integration within CI/CD pipelines.
• Define and review security requirements throughout the SDLC.
• Validate security-tool findings to reduce false positives.
• Assist investigations and remediation of app security incidents.
• Contribute to security standards and reusable controls.
• Promote secure development practices across teams.
• Collaborate with developers, DevOps, QA, product teams, and security specialists.
• Monitor emerging AppSec threats and improve processes.

Skills

Threat modeling

Security assessments

Communication

Python scripting

Security architecture reviews

Tools

SAST tools

DAST tools

SCA tools

CI/CD security tooling

Job description

WhiteBIT, a fintech platform with a global team of over 1,200 professionals, is building the Web3 era. We protect more than 8 million users worldwide and partner with leaders like VISA and FC Barcelona.

We are seeking an Application Security Engineer to strengthen our product security across cloud, containers, and APIs. You will perform security assessments, threat modeling, and code reviews, helping to integrate secure practices into the SDLC and CI/CD workflows.