Security Engineer (Senior)

Market insights

Stack

Apply

Upload your CV — we will connect you with the employer directly through our pool.

Description

Job Responsibilities 1. Fund Business Link Security and Risk Control Deeply participate in security architecture reviews of exchange/Web3 fund links, including key stages such as deposit confirmation, order state machine transitions, and withdrawal release. Identify and defend against logical vulnerabilities and risk control risks such as fake deposits, block reorganization/rollback, duplicate withdrawals, concurrency races, and amount precision anomalies. Build and optimize deposit/withdrawal reconciliation pipelines and hot/cold wallet balance verification mechanisms to achieve minute-level anomaly alerts and automated interception (limits, over-limit review, blacklisted addresses/high-frequency interception). 2. Wallet Key and Signing Service Security Architecture (including Relayer Security) Design and implement security solutions for hot wallet signing services, and drive the selection and implementation of hot/cold isolation, Multi-Sig, MPC threshold signatures, or HSM hardware hardening solutions. Responsible for the security architecture design of signing services and transaction forwarding/relaying (Relayer/Signer), implementing Nonce management, Replay Protection, signing permission control, and abnormal call rate limiting. Standardize key storage, call authentication, full signing audit, and key rotation processes, and implement strict Separation of Duties (SoD) and multi-level approval mechanisms for large withdrawals. 3. DevSecOps and Software Supply Chain Securi

Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.