Security Engineer (Senior)

Analisi del mercato

Stack

Dettagli

Gratis, dopo l'accesso.

Candidati

Carica il tuo CV: datori di lavoro e recruiter di diversi paesi che cercano il tuo profilo potranno contattarti direttamente.

Descrizione

Job Responsibilities 1. Fund Business Link Security and Risk Control Deeply participate in security architecture reviews of exchange/Web3 fund links, including key stages such as deposit confirmation, order state machine transitions, and withdrawal release. Identify and defend against logical vulnerabilities and risk control risks such as fake deposits, block reorganization/rollback, duplicate withdrawals, concurrency races, and amount precision anomalies. Build and optimize deposit/withdrawal reconciliation pipelines and hot/cold wallet balance verification mechanisms to achieve minute-level anomaly alerts and automated interception (limits, over-limit review, blacklisted addresses/high-frequency interception). 2. Wallet Key and Signing Service Security Architecture (including Relayer Security) Design and implement security solutions for hot wallet signing services, and drive the selection and implementation of hot/cold isolation, Multi-Sig, MPC threshold signatures, or HSM hardware hardening solutions. Responsible for the security architecture design of signing services and transaction forwarding/relaying (Relayer/Signer), implementing Nonce management, Replay Protection, signing permission control, and abnormal call rate limiting. Standardize key storage, call authentication, full signing audit, and key rotation processes, and implement strict Separation of Duties (SoD) and multi-level approval mechanisms for large withdrawals. 3. DevSecOps and Software Supply Chain Securi

Descrizione completa, azienda e link per candidarti: dopo l'accesso. Accedi

I contatti del datore di lavoro (email/telefono/telegram) sono nascosti nell'anteprima pubblica. Invia il tuo CV così i datori di lavoro possono contattarti direttamente.