Senior Offensive Security Engineer

<div class="content-intro"><p style="text-align: justify;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><strong>About BitMEX</strong></span></p> <p style="text-align: justify;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">BitMEX stands as a globally leading exchange for crypto derivatives, offering traders a professional-grade trading platform. Since its inception in 2014, BitMEX has maintained an impeccable security record with “no coin lost, ever!”.</span></p> <p style="text-align: justify;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Our platform caters to cryptocurrency derivatives traders by providing low latency, deep liquidity, and maximum availability. Currently, BitMEX offers more than 100 derivatives contracts, 16 pairs for spot trading, and an easy covert function between 30+ different cryptocurrencies.</span></p> <p style="text-align: justify;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">In 2015, BitMEX revolutionised the market by inventing the Perpetual Swap, which has since become the most widely traded crypto product. Demonstrating a commitment to transparency, since 2021, BitMEX has been among the first exchanges to regularly publish its on-chain Proof of Reserves and Proof of Liabilities, ensuring that the funds available exceed the total client balances."</span></p> <p style="text-align: justify;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">For more information on BitMEX, company initiatives and our products, please visit the&nbsp;<a href="https://blog.bitmex.com/">BitMEX Blog</a> or&nbsp;<a href="http://www.bitmex.com">www.bitmex.com</a>, and follow&nbsp;<a href="https://www.linkedin.com/company/bitmex">LinkedIn</a>,&nbsp;<a href="https://discord.com/invite/X2jcEX4Csf">Discord</a>,&nbsp;<a href="https://t.me/BitMEX_Group">Telegram</a> and&nbsp;<a href="https://twitter.com/BitMEX">X</a>.</span></p></div><p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Overview</strong></span></p> <p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!</span></p> <p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.</span></p> <p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.</span></p> <p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Key Responsibilities</strong></span></p> <ul> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Conducting internal penetration tests on our software and infrastructure stack</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Red and purple team exercises to test our monitoring</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Security research &amp; threat Intelligence, working with security response</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Application security &amp; code reviews, internal training of engineers</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Being part of incidents to help triage and investigate issues</span></li> </ul> <p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Qualifications</strong></span></p> <ul> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">5+ Years in Information Security.</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Proven expertise in offensive security either through certifications, recognition, or referees.</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Strong communication skills and work ethic: contribute actively to the company and become ‘known’</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Candidates with less experience will be considered for an Offensive Security Engineer position.</span></li> </ul> <p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Nice to have</strong></span></p> <ul> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Experience with derivatives and cryptocurrency is a bonus but not required.</span></li> <li style="font-size: 10pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Development expertise in Go is a bonus but not required</span></li> </ul> <p><strong><span style="font-size: 10pt;">Why BitMEX?</span></strong></p> <p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;">BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.</span></p> <p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;">We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.</span></p> <p><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;">In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:</span></p> <ul> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Work from home</strong> to help you find the perfect balance between work, family and personal life</span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>25 days of annual leave</strong>, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities</span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;">A top tier &amp; <strong>comprehensive medical, dental and vision policy</strong> for you and your dependents</span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Professional development allowance</strong> to support your career advancement</span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;">Access to our <strong>annual wellness</strong> benefits to cultivate your physical and mental growth</span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;">Don’t forget the advantage of our <strong>Beyond Border</strong> <strong>Remote Working</strong> policy, where you get to work away from your home country</span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Team building &amp; offsite events to bring our global team closer</strong></span></li> <li style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><span style="font-family: helvetica, arial, sans-serif; font-size: 10pt;"><strong>Life insurance coverage</strong> to provide a safety net for your family’s future</span></li> </ul> <p style="text-align: right;"><em><span style="font-size: 8pt;">#LI-CH1</span></em></p><div class="content-conclusion"><p><span style="font-size: 10pt; font-family: helvetica, arial, sans-serif;">Does this sound like the type of working culture you can thrive in? Apply online now!</span></p></div>