Senior Application Security Architect

About the role

Binance is seeking a Senior Application Security Architect to design, implement and maintain secure application architectures across its global blockchain ecosystem. The role involves shaping security standards, guiding development teams and ensuring compliance with industry best practices.

Key responsibilities

• Design and implement secure application architectures, covering authentication, authorization, data protection and vulnerability management.
• Develop and maintain secure coding guidelines and standards.
• Conduct architectural and security requirement reviews to identify and mitigate risks from new features, bug fixes or product releases.
• Implement security controls, counter‑measures and conduct regular security audits or penetration testing.
• Ensure compliance with standards such as OWASP and stay current on emerging threats and vulnerabilities.
• Research business domains to build risk‑identification baselines and communicate findings to stakeholders.
• Provide mentorship and guidance on secure coding practices to development teams.

Required profile

• Bachelor’s degree or higher in Computer Science or a related field.
• Minimum 6 years of application security experience (10 + years preferred).
• Strong understanding of software development lifecycle and SDLC principles.
• Proficiency with mainstream web application technologies, especially Java‑based stacks.
• Deep knowledge of OWASP Top 10 issues and their remediation.
• Experience with static security scanning tools, penetration testing and threat modeling.
• Ability to work independently and collaborate with global, bilingual (English/Mandarin) teams.

Required skills

• Java
• OWASP Top 10
• Static security scanning tools
• Penetration testing
• Threat modeling
• Attack surface analysis
• Mobile application security
• Web application security