Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.
Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorization, and non-repudiation standards based on realistic threats to the organization.
5-8 years of hands-on experience in security, data security, or a related engineering function, with practical expertise in encryption, KMS/HSM, and cloud security.
Lead and develop a team of consultants to deliver high-quality OT/ICS security engagements, providing coaching, quality assurance, and technical direction.
Own the day-to-day administration, availability, and performance of enterprise endpoint security platforms, including Antivirus and/or Next-Generation Antivirus (NGAV).
Secure Web Gateway (SWG): Design and maintain web security policy architecture (URL filtering, cloud application control, cloud firewall, file-type/sandbox policies). Engineer SSL/TLS inspection strategies, exemption frameworks, and traffic steering via PAC files, explicit proxies, and GRE/IPsec tunnels. Lead the migration of legacy on-premises proxies to Cloud SWG.
Centre Command and Governance: Lead the Security Training Centre, translate IST strategy and approved policies into operating plans, establish clear command and reporting arrangements, and maintain disciplined, safe and audit-ready operations.
Develop and maintain Network Security tools, practices and processes, coordinate security measures to protect the organization’s network infrastructure.
As the digital-asset industry continues to evolve, so does the risk landscape across the infrastructure. To stay ahead, Binance Infra Team is investing heavily in AI-driven abnormal detection, incident management and system pentest, so that we can proactively identify and address potential vulnerabilities and keep our platform secure.