Position: Application Security Engineer (Java code audit)
Company: Binance
Experience required: 2y
English level: upper

We are flexible on location, so this role can be remote. Relocation to one of our locations is also discussable (e.g. Singapore).

**Responsibilities:**
• Follow the product development process and master the product business logic.
• Formulate source code business security specifications.
• Plan and execute manual source code security audit and analysis.
• Identify security vulnerabilities and code defects in Java programs, verify the vulnerabilities, and prepare Security Hardening Report.

**Requirements:**
• 3-5+ years in Java development.
• 2+ years in the Security area.
• Solid knowledge of Java, strong source code auditing skills.
• Knowledge of popular Java frameworks (Spring, etc), experience with Web applications.
• Understanding the different types of security vulnerabilities that can occur.
• Experience with at least one mainstream source code analysis tool.
• Clear thinking, excellent analysis, and problem-solving skills, good learning ability, and team player mentality.
• Strong communication skills, stress resistance, and keen interest in research.