Secuity Engineer

As a Security Engineer at Bitword, you own end-to-end security architecture for a cryptocurrency futures and derivatives trading platform. You design, implement, and maintain security controls across infrastructure, networks, and systems, working in a hybrid arrangement based in Hong Kong SAR. Your work spans penetration testing, incident response, compliance, and crypto-native security challenges including smart contracts and wallet systems.

What you'll do

• Own end-to-end company security architecture: network, application, data, and cloud security
• Execute penetration testing, vulnerability scanning, and security assessments; drive closed-loop remediation
• Build and operate security infrastructure including WAF, IDS/IPS, and SIEM systems
• Configure and harden AWS environments, including IAM least-privilege access, security groups, VPC isolation, and CloudTrail auditing
• Define and enforce Secure Development Lifecycle (SDL); participate in requirements review and code security audits
• Monitor security events, perform rapid incident response, and conduct root-cause analysis
• Establish and maintain key, certificate, and private-key management systems
• Design specialized controls for crypto-native risks: smart contracts, wallet systems, and API surfaces
• Drive security compliance aligned with regulatory requirements, including data protection under KYC/AML
• Run regular security exercises such as red-blue team exercises and phishing simulations to strengthen organizational security posture

What you bring

• Bachelor's degree in computer science or related field, plus 3+ years of security engineering or penetration testing experience
• Strong understanding of common vulnerabilities (OWASP Top 10, SQLi, XSS, SSRF, deserialization) and corresponding fixes
• Hands-on experience with AWS security services including IAM, KMS, Security Hub, GuardDuty, and WAF
• Proficiency with penetration-testing tools such as Burp Suite, Nmap, and Metasploit
• Solid fundamentals in network security: firewalls, VPN, TLS/SSL, and PKI
• Programming ability in Python, Go, or Shell sufficient to write security tools and automation
• Understanding of blockchain and smart-contract security
• Strong written communication and ability to drive security practices into engineering workflows

Nice to have

• Digital-asset security experience
• Security certifications such as CISSP, OSCP, or CEH

What we offer

• Full-time position based in Hong Kong SAR with hybrid work arrangement

About Bitword

Bitword Ltd builds a world-class cryptocurrency futures and derivatives trading ecosystem, focused on delivering a professional, secure, and highly efficient contract trading experience. The company invests in advanced technologies and robust security measures to protect digital assets and transactions.