[Hiring] Application Security Engineer @WhiteBIT

Role Description

Join us as an Application Security Engineer! We are the creators of a new fintech era, aiming to make blockchain accessible to everyone in everyday life.

Qualifications

• 2+ years of experience in Application Security, Product Security, or a related security role.
• Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices.
• Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing.
• Ability to review source code and identify security vulnerabilities.
• Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools.
• Understanding of CI/CD pipelines and experience integrating security checks into the SDLC.
• Knowledge of API security, authentication, authorization, and common security protocols.
• Familiarity with cloud, container, or Kubernetes security.
• Basic knowledge of Web3 and smart contract security.
• Basic scripting or programming skills, preferably in Python or another relevant language.
• Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders.

Requirements

• Perform application security assessments, source-code reviews, and penetration testing.
• Participate in threat modeling and security architecture reviews for new and existing products.
• Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams.
• Identify, prioritize, and track vulnerabilities throughout the remediation process.
• Provide developers with clear remediation guidance and secure coding recommendations.
• Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines.
• Participate in defining and reviewing security requirements throughout the software development lifecycle.
• Validate security-tool findings and help reduce false positives.
• Support investigations and remediation of application-related security incidents.
• Contribute to application security standards, guidelines, and reusable security controls.
• Help deliver security training and promote secure development practices across engineering teams.
• Collaborate with developers, DevOps, QA, product teams, and other security specialists.
• Monitor emerging application security threats and contribute to improving AppSec processes.

Benefits

• Immerse yourself in Crypto & Web3: Master cutting-edge technologies and become an expert in the most innovative industry.
• Work with the Fintech of the Future: Develop your skills in digital finance and shape the global market.
• Take Your Professionalism to the Next Level: Gain unique experience and be part of global transformations.
• Drive Innovations: Influence the industry and contribute to groundbreaking solutions.
• Join a Strong Team: Collaborate with top experts worldwide and grow alongside the best.
• Work-Life Balance & Well-being: Modern equipment, comfortable working conditions, and an inspiring environment to help you thrive.
• 24 calendar days of paid leave.
• Additional days off for national holidays.

Company Description

WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT, and VISA.