Security Engineer (Python)

About the role

This role focuses on enhancing the security posture of Binance's cloud infrastructure and production systems. The Security Engineer will be responsible for building production-grade security applications and services using Python, developing internal security platforms and tooling from scratch, and creating security APIs. A key aspect is implementing automation to detect misconfigurations, enforce security baselines, and streamline security reviews and alerts, contributing to a preventative security approach.

The position involves designing and enforcing secure cloud architectures within AWS, including policy enforcement for IAM least-privilege models, secrets management, and network security. The engineer will also secure CI/CD pipelines, own code and artifact scanning, and define security gates that balance development speed with risk. This work supports Binance's goal of maintaining industry-leading security for its global blockchain ecosystem.

Success in this role means driving continuous improvement from security incidents, leading technical aspects of investigations, and partnering with other teams on threat modeling and secure design reviews. The ideal candidate will apply a software engineering mindset to security problems, focusing on automation over manual processes, and will be comfortable operating in a fast-moving production environment.

The annual salary for this position is between $98,000 and $162,000 USD.

Skills that matter here

• Python: This role requires advanced Python development skills for building production-grade security applications, services, APIs, and internal tooling.
• Cloud security: The position involves securing cloud infrastructure and production systems, designing secure cloud architectures, and enforcing security policies.
• CI/CD: The engineer will secure CI/CD pipelines, implement security tooling, and ensure signed artifacts and immutable builds.
• Kubernetes: Experience with Kubernetes is required for securing containerized environments and related infrastructure.
• AWS: The role involves designing and enforcing secure architectures specifically within the AWS cloud platform.
• Infrastructure as Code: This skill is necessary for managing and securing infrastructure through automated, version-controlled configurations.

Who this role suits

• Someone who prefers to build automated solutions rather than relying on manual checklists.
• A person with a strong software engineering background who applies those principles to security challenges.
• An individual comfortable communicating technical concepts and influencing other engineers.
• A self-starter who thrives in fast-paced, production-oriented environments with autonomy.

From the employer

• Build production-grade security applications and services using Python
• Develop internal security platforms and tooling from scratch
• Create security APIs and integrations with existing systems
• Build automation to detect misconfigurations, enforce security baselines and automate security reviews and alerts
• Design and implement AI-powered security integrations
• Design and enforce secure cloud architectures (AWS)
• Implement policy enforcement for IAM least-privilege models, secrets management (e.g., Vault, SSM, Sealed Secrets) and security groups and private networking
• Secure CI/CD pipelines (GitHub Actions) to prevent secret leakage and enforce signed artifacts and immutable builds
• Own code and artifact scanning: SAST / DAST, dependency & SBOM scanning, container image scanning
• Define security gates that balance developer velocity and risk
• Improve runtime security controls: detection of suspicious activity and abuse prevention
• Policy enforcement in production
• Partner with teams on threat modeling and secure design reviews
• Support incident response and post-mortems from a security perspective
• Drive continuous improvement from security incidents and near-misses
• Lead technical aspects of security incident investigations

• Strong experience in Infrastructure / Platform / Cloud Security
• Advanced Python development skills (not just scripting—building production software)
• Hands-on with CI/CD security tooling
• Experience building security applications and platforms
• Software design patterns and engineering best practices
• Cloud platforms: AWS
• Kubernetes
• CI/CD systems
• Infrastructure as Code
• Python software development (APIs, services, tooling)
• Automation-first, not manual checklists
• Strong communicator who can influence engineers
• Comfortable operating in fast-moving, production environments
• Software engineering mindset applied to security problems

• Shape the future with the world’s leading blockchain ecosystem
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle unique, fast-paced projects with autonomy in an innovative environment
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)