Binance

Smart Contract Security Engineer (Security Audit)

Singapore, Taiwan, United Arab Emirates full-time Mid Salary not listed
full-time Mid level Technology & IT Curated
Sign in to apply Free account — we bring you straight back to this role.

About the role

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
This is a unique opportunity to contribute to the field and contribute to the blockchain community. You will work hand-in-hand with various talented workers from Binance on the cutting-edge of crypto to guard safety across many projects and systems. You will also coordinate with other teams aside from the security group, which could provide you an in-depth understanding of the crypto world.
Responsibilities

Perform a review analysis on newly disclosed vulnerabilities for smart contracts and summarize the root cause behind the exploits for early detection in the future

Conduct security audits on both smart contracts and blockchains, and write high-quality audit reports

Conduct security reviews of backend/off-chain systems that interact with or control on-chain smart contract execution

Develop automated scanning and monitoring tools for smart contracts and blockchains

Utilize scanning tools to detect vulnerabilities in online contracts and promptly issue risk warnings

Conduct post-mortem analyses on various hacking incidents, examining the causes, processes, and basic fund tracing

Proactively identify on-chain risks, monitor and model emerging on-chain attack vector trends, and possess a solid understanding of on-chain security risks such as fraud and phishing

Demonstrate a strong understanding of EVM-compatible blockchains and layer 2 solutions, and be familiar with DeFi design patterns

Requirements

Currently enrolled or holding a bachelor's degree (or higher) in Computer Science or a related field

Proficient in Smart Contract programming languages, such as Solidity, among others

Basic understanding of common Smart Contract security vulnerabilities

Basic understanding of blockchain and smart contract principles, experienced with reading Blockchain explorers. Well versed with the different types of hacks on smart contracts, and its common attack vectors

Experience conducting security reviews of backend/off-chain systems that interact with or control on-chain smart contract behavior

Ability to assess end-to-end security risks across backend services, APIs, signing flows, admin tooling, and smart contracts

Strong understanding of how off-chain components influence on-chain execution

Well versed with the different types of scams such as Wallet Drainers in the space and how to identify them

Familiar with smart contract development testing, transaction analysis, and other tools

Experienced in using VSCode, Git, or other version control applications

Proficient in Python or another object-oriented programming language

Fundamental knowledge of code analysis and program debugging

Additional beneficial skills

Passionate about cryptocurrency / DeFi / smart contract / blockchain

Basic knowledge of fuzz testing or static analysis

Basic knowledge of detection, exploitation, and prevention of security vulnerabilities

Experience in smart contracts development (e.g Foundry, HardHat, etc.)

Experience in CTF or bug bounty programs (e.g. Hack The Box, WebGoat, etc.)

Experience in Front-end development (React, Javascript, Typescript)

Experience in data mining and data analysis of on-chain data

Have great interest in Binance, high work enthusiasm and responsibility, good and humble work attitude

Why Binance

  • Shape the future with the world’s leading blockchain ecosystem
  • Collaborate with world-class talent in a user-centric global organization with a flat structure
  • Tackle unique, fast-paced projects with autonomy in an innovative environment
  • Thrive in a results-driven workplace with opportunities for career growth and continuous learning
  • Competitive salary and company benefits
  • Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.

Originally posted on Himalayas

Interview prep

Walk in with sharper answers.

Use this as a quick practice sheet before you speak with the employer.

Mid
Technology & IT Data Analysis Finance Javascript Python Mid level full-time

Likely questions

  1. Tell us about work you have done that is close to the Smart Contract Security Engineer (Security Audit) role.
  2. How would you approach your first 30 days at Binance?
  3. Which of Data Analysis, Finance and Javascript have you used recently, and what did it help you achieve?
  4. Describe a time you solved a problem without waiting to be told exactly what to do.
  5. How do you handle busy days, changing priorities, or pressure at work?

Prepare before the call

  • A recent example that proves your experience with Data Analysis, Finance and Javascript.
  • One short story with a problem, your action, and the result.
  • Two examples that show the strengths listed on your CV.
  • A clear reason why this role and company interest you.
  • Your availability, preferred work style, and salary expectations.

Ask them

  • What would success look like in the first 90 days?
  • What are the main problems this hire should help solve?
  • How does the team give feedback and measure good work?
  • What does a normal working week look like for this role?
Practice line

I am interested in the Smart Contract Security Engineer (Security Audit) role because I can bring practical experience in Data Analysis, Finance and Javascript, learn the team quickly, and contribute to the outcomes Binance needs from this hire.

Related jobs.

More roles from this company or category.