Binance

Mobile Security Engineer - Risk

Binance • TW
TypeScriptKotlinSwift Remote
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by over 280 million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

Responsibilities

  • Proficiency in one or more of the following: Java/Kotlin for Android, or Objective-C/Swift for iOS, or JavaScript/TypeScript for web
  • Familiarity with NDK/JNI and underlying system mechanisms such as Binder, sandboxing, and permission management
  • Experience optimizing SDK performance (memory, power consumption, compatibility) to ensure zero intrusion to the host app’s user experience
  • Hands-on experience with reverse engineering on Android/iOS/JavaScript; ability to analyze samples to understand underlying principles; solid knowledge of packet capture, decompilation, hooking techniques, and related frameworks
  • Strong understanding of Android system architecture and Android NDK development; familiarity with x86 and ARM assembly; proficiency with analysis and debugging tools such as IDA and GDB
  • Nice to have: Prior experience in mobile security projects
  • Requirement

  • Design and develop mobile (Android/iOS/Web) security and risk-control SDKs, building a highly available and resilient defensive system
  • Optimize SDK performance to ensure no impact on the main app’s user experience
  • Analyze malware and cheat/bot samples and implement effective countermeasures
  • Evaluate competing security solutions and continuously improve our own security products