Recruit123 is inviting Expressions of Interest (EOI) from experienced Crypto Exchange Security Engineers for active and upcoming pipeline opportunities with licensed and growth-stage digital asset exchanges in Singapore. In this role, you will be responsible for fortifying the exchange’s security posture end-to-end—safeguarding proprietary hot/warm/cold wallet architectures, securing low-latency matching engines and public APIs, and defending critical exchange infrastructure against advanced threat actors.

Note: This is an Expression of Interest to connect with qualified talent for active and upcoming pipeline opportunities.

Key Responsibilities:

• Architect, harden, and audit digital asset custody systems, including Multi-Party Computation (MPC), Hardware Security Modules (HSMs), and multi-signature authorization frameworks.

• Design and enforce secure transaction-signing pipelines, threshold approval workflows, and key ceremony protocols for platform treasury and omnibus wallets.

• Conduct threat modeling, vulnerability assessments, and secure code reviews across exchange microservices, matching engines, order routing APIs, and smart contract integrations.

• Deploy and manage robust edge defenses, including advanced anti-DDoS mitigations, bot detection, Web Application Firewalls (WAF), and rate-limiting controls to protect against API abuse and flash crashes.

• Protect cloud-native infrastructure (AWS/GCP, Kubernetes) and CI/CD deployment pipelines using automated static/dynamic scanning (SAST/DAST) and zero-trust network policies.

• Build automated detection mechanisms to identify suspicious withdrawal anomalies, account takeover (ATO) indicators, and credential stuffing attacks in real time.

• Oversee private bug bounty programs (e.g., HackerOne, Immunefi) and coordinate external third-party penetration testing and cryptographic audits.

• Align exchange security architecture with Singapore regulatory standards, specifically the MAS Technology Risk Management (TRM) Guidelines and Cyber Hygiene notices.

Requirements:

• Degree or Diploma in Cybersecurity, Computer Science, Computer Engineering, or a related discipline.

• Minimum 3 to 6 years of direct experience in cybersecurity engineering, application security, or infrastructure security within a crypto exchange, Web3 custody provider, or high-frequency trading firm.

• Practical technical familiarity with cryptographic primitives, wallet architectures (hot/cold segregation, MPC, BIP-32/39/44 standards), and key management infrastructure.

• Strong proficiency in scripting or programming (e.g., Go, Python, Rust, or C++) for security automation, tooling development, and log analysis.

• Proven background securing containerized microservices (Docker, Kubernetes) and public cloud environments (AWS, GCP).

• Solid understanding of exchange threat vectors, API security (REST/WebSocket), and OWASP Top 10 vulnerabilities.

• Relevant industry certifications are highly regarded (e.g., OSCP, CISSP, AWS Certified Security – Specialty, CCSP).

What’s on Offer / What to Expect:

• Competitive monthly base salary ranging from SGD 8,000 to SGD 12,500, reflective of specialized custody and crypto security expertise.

• Confidential consultation on high-impact security engineering roles across leading digital asset institutions in Singapore.

• Opportunity to solve mission-critical security challenges protecting billions in digital assets.

Recruit123 Pte Ltd

EA Personnel: Lian Cher Chieh (Steffan)

EA Personnel Registration No.: R1217705

EA License No.: 25C2810EA

Email: [email protected]