Cloud Security Engineer

As a Cloud Security Engineer at Bybit, you design and strengthen security architectures across public cloud environments, build security operations capabilities, and drive cloud security practices across the organization. You join a team at one of the world's leading cryptocurrency exchanges serving over 80 million users, where you help protect critical infrastructure and shape the security posture of a global financial platform.

What you'll do

• Design, implement, and continuously strengthen security architectures across public cloud environments including AWS, Tencent Cloud, Huawei Cloud, and Alibaba Cloud, with focus on container isolation, Identity and Access Management (IAM), VPC network segmentation, and security policies
• Build and improve cloud security monitoring and operations capabilities, including Security Information and Event Management (SIEM) and Cloud Security Posture Management (CSPM)
• Detect, investigate, and respond to security incidents, conduct root cause analysis and post-incident reviews, and drive remediation through to closure
• Assess and harden cloud compute instances, containers, cloud services, and supporting infrastructure, and develop vulnerability scanning capabilities
• Design and maintain cloud IAM and Cloud Access Management (CAM) permission frameworks, establish lifecycle management policies for credentials and access tokens, and enforce least-privilege access
• Conduct regular security baseline assessments and risk assessments across cloud environments, and produce security compliance reports against industry standards such as CIS Benchmarks
• Support internal and external security audits, compliance reviews, and remediation activities
• Develop and maintain cloud security policies, technical standards, and best-practice documentation, and provide security guidance and training to engineering and operations teams

What you bring

• A solid foundation in Linux systems administration, with a strong understanding of networking protocols such as TCP/IP, DNS, and TLS, as well as common network security principles
• Familiarity with major public cloud platforms including AWS, Tencent Cloud, and Alibaba Cloud, with hands-on experience in cloud resource management, security configuration, or operations
• An understanding of cloud-native technologies and their security models, with familiarity of Docker, Kubernetes, microservices, serverless architectures, and associated security practices
• Familiarity with public cloud IAM/CAM frameworks, with practical experience in permission model design, account governance, key management, or least-privilege implementation
• An understanding of common cloud security threats and attack paths, including lateral movement, privilege escalation, server-side request forgery (SSRF), and abuse of the Instance Metadata Service (IMDS)
• Experience in vulnerability scanning, risk assessment, or security tool integration
• Strong security risk awareness, analytical and problem-solving skills, and effective communication and collaboration abilities, with a demonstrated ability to drive cross-functional security initiatives and remediation efforts to completion

Nice to have

• Hands-on experience deploying, integrating, and operating Tenable, Orca, or comparable vulnerability scanning solutions
• Experience managing north-south and east-west traffic, reducing exposed network boundaries, or designing and implementing zero-trust network architectures

What we offer

• Study Growth Fund to support your professional development and continuous learning
• Regular team-building activities, workshops, and internal events designed to promote collaboration and innovation
• Opportunities for career advancement and growth within a rapidly expanding global company
• Internal mobility and job opportunities to help build your long-term career path

About Bybit

Established in 2018, Bybit is one of the world's leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. The company delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3, recognized as one of the most trusted and transparent platforms in the digital asset industry.