Cloud Security Engineer

About Us

1. Cloud Security Architecture and Hardening
   Design, implement, and continuously strengthen security architectures across public cloud environments, including AWS, Tencent Cloud, Huawei Cloud, and Alibaba Cloud. Areas of focus include container isolation, Identity and Access Management (IAM), VPC network segmentation, and security policies.

1. Security Operations and Incident Response
   Build and continuously improve cloud security monitoring and operations capabilities, including Security Information and Event Management (SIEM) and Cloud Security Posture Management (CSPM). Detect, investigate, and respond to security incidents, conduct root cause analysis and post-incident reviews, and drive remediation through to closure.

1. Infrastructure Security and Vulnerability Management
   Assess and harden cloud compute instances, containers, cloud services, and supporting infrastructure. Develop and enhance host and cloud vulnerability scanning capabilities, and track remediation to completion.

1. Identity and Access Management
   Design and maintain cloud IAM and Cloud Access Management (CAM) permission frameworks. Establish lifecycle management policies for credentials, including access keys and secret keys (AK/SK), API keys, and access tokens. Enforce least-privilege access and conduct periodic access reviews.

1. Compliance and Risk Management
   Conduct regular security baseline assessments and risk assessments across cloud environments. Produce security compliance reports against industry standards such as CIS Benchmarks, and support internal and external security audits, compliance reviews, and remediation activities.

1. Security Standards and Technical Enablement
   Develop and maintain cloud security policies, technical standards, and best-practice documentation. Provide security guidance, technical support, and training to engineering and operations teams to strengthen the organization’s overall cloud security capabilities.

1. A solid foundation in Linux systems administration, with a strong understanding of networking protocols such as TCP/IP, DNS, and TLS, as well as common network security principles.

1. Familiarity with major public cloud platforms, including AWS, Tencent Cloud, and Alibaba Cloud, with hands-on experience in cloud resource management, security configuration, or operations.

1. An understanding of cloud-native technologies and their security models, with familiarity with Docker, Kubernetes, microservices, serverless architectures, and associated security practices.

1. Familiarity with public cloud IAM/CAM frameworks, with practical experience in permission model design, account governance, key management, or least-privilege implementation.

1. An understanding of common cloud security threats and attack paths, including lateral movement, privilege escalation, server-side request forgery (SSRF), and abuse of the Instance Metadata Service (IMDS).

1. Experience in vulnerability scanning, risk assessment, or security tool integration. Hands-on experience deploying, integrating, and operating Tenable, Orca, or comparable solutions is preferred.

1. Experience managing north–south and east–west traffic, reducing exposed network boundaries, or designing and implementing zero-trust network architectures is preferred.

1. Strong security risk awareness, analytical and problem-solving skills, and effective communication and collaboration abilities, with a demonstrated ability to drive cross-functional security initiatives and remediation efforts to completion.

Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.