(Sr.) Enterprise Security Engineer

About BTSE:BTSE is a leading digital asset exchange that offers a simple and secure way to trade cryptocurrencies. As the go-to exchange for all things crypto, BTSE is one of the top trusted crypto platforms for institutions, retail users and first-time traders. BTSE has developed multiple trading technologies that have been adopted across the industry, setting new standards for excellence and innovation in the world of digital asset trading. Additionally, BTSE licenses its industry-leading technology to exchanges worldwide through its white label exchange solutions, strengthening the BTSE ecosystem and bridging traditional finance with digital assets everywhere. 
About the Opportunity:We are seeking a highly skilled, senior and motivated Enterprise Security Engineer to join our dynamic team. As an Enterprise Security Engineer, you will play a crucial role in the development of the security engineering and architectural direction for protecting the BTSE ecosystem. This position will directly contribute to the overall global enterprise security architecture across all types (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS).You will collaborate closely with cross-functional teams, including infrastructure, developers personnel, and security professionals, to integrate security best practices. You will be responsible for implementing and managing the security of BTSE’s internal information systems’ infrastructure and processes. You will work closely with our IT and Security teams to develop security capabilities, enforce security policies, and monitor internal systems for security threats.

Responsibilities:

• Develop and implement security measures to protect our company's information assets against unauthorised access, disclosure, or misuse.
• Incident Response and Monitoring: Participate in incident response activities, investigate security incidents, and contribute to improving incident response processes. Develop and maintain security monitoring systems to detect and respond to security threats proactively.
• Contribute to and enforce our company's IT and Security policies and procedures.
• Work closely with our IT department to harden our infrastructure using best practices in the IAM, GSuite, MDM and EDR domains  Work closely with the End User Compute team to strengthen our security posture on workstation and Mobile endpoints (Microsoft, Apple and Android Ecosystems)Advise our employees on best practices for maintaining the security of their endpoints, BYOD and network infrastructure.
• Devise novel sharing controls and associated monitoring to protect company data, including intelligent group management, Data Loss Prevention (DLP) and other security controls as appropriate.
• Employ forward-thinking models like “secure by default” and “zero trust” to create sustainably secure environments for knowledge workers and developers.
• Identify and remediate vulnerabilities in our internal systems, adhering to best practices for data security.
• Educate employees on the importance of data security, and advise them on best practices for maintaining a secure environment.
• Contribute to BTSE’s information security roadmaps by staying up to date with the latest security threats, and making recommendations for improving our security posture.
• Participate in the solution and design for cloud and cloud/hybrid-based systems. Possess a firm understanding of the offerings within various cloud security platforms. Security Testing and Compliance: Establish and maintain a robust testing framework, including penetration testing, vulnerability scanning, and security assessments, to identify and mitigate potential security risks.

Requirements:

• At least 10 years of experience in Information Technology with at least 5 years of experience in Enterprise Security Domain
• 5 years of experience with Microsoft and Apple End Point Management
• Experience with assessment, development, implementation, optimisation, and documentation of a comprehensive and broad set of security technologies and processes such as data protection, identity and access management, Endpoint Detection and Response, network security within SaaS, IaaS, PaaS, and Endpoint Security
• Experience with enterprise applications (architecture, development, support, and troubleshooting).
• Proficiency in scripting and automation languages is a plus (e.g., Bash, PowerShell, Python).Strong analytical and problem-solving skills, with the ability to identify and address security vulnerabilities and risks.
• Excellent communication and collaboration skills, with the ability to work effectively in cross-functional teams.
• Experience with web3 and blockchain technologies is a plus.Prior experience in the Financial Services domain is a plus.
• Relevant certifications (e.g., CISSP, CEH, AWS Certified Security Specialty) are a plus.
• Able to effectively listen, speak, read and write in English, with Chinese as a plus.

#LI-YS1