Application Security Engineer (AppSec)
Role in brief
WhiteBIT is a leading cryptocurrency exchange seeking an Application Security Engineer to enhance its security posture through audits and testing. Candidates with at least two years in AppSec and familiarity with secure development practices should apply.
About the role
WhiteBIT is a prominent cryptocurrency exchange that supports a vast digital finance ecosystem, boasting over 35 million users and a trading volume of $2.7 trillion. The company is focused on maintaining high security standards as it expands its operations across Europe.
In this role, the Application Security Engineer will be responsible for conducting AppSec audits, code reviews, and penetration testing to identify vulnerabilities. Success in this position involves effectively analyzing bug bounty reports and integrating security measures into the software development lifecycle.
Skills that matter here
- Application Security: This role requires a solid background in Application Security to conduct audits and improve the security framework.
- Secure Development Practices: Familiarity with secure development practices is essential for ensuring that security checks are integrated into the development process.
Who this role suits
- A candidate with at least two years of experience in Application Security or a related field.
- Someone who is detail-oriented and can analyze complex security issues effectively.
- A proactive individual who is comfortable working in a fast-paced, remote environment.
- Fluency in Ukrainian and a working knowledge of English, with a focus on communication.
From the employer
- Conduct AppSec audits, code reviews, and penetration testing.
- Analyze bug bounty reports and assist in vulnerability remediation.
- Integrate SAST, DAST, SCA, and secret detection in CI/CD.
- At least two years in Application Security, Product Security, or a related field.
- Knowledge of OWASP Top 10, threat modeling, and secure development practices.
- Experience in source code analysis and integrating security checks into the SDLC.
- Ukrainian - native, English - B1.
Questions about this role
Is this position remote?
Yes, this role is fully remote.
What are the required qualifications?
Candidates should have at least two years of experience in Application Security and knowledge of secure development practices.
✓ Drop your CV once, then continue to the employer's application form. Your profile stays here for every recruiter hiring on web3vacancy.