Role Overview 

As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments.

Key Responsibilities

• Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability.
• Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices.
• Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps.
• Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve.
• Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient.

Qualifications

Core Security & Architecture

• 8+ years of professional experience in the cybersecurity industry.
• Deep expertise in security principles across infrastructure, applications, data layers, and integration points.
• Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC).
• Track record of successfully managing complex, large-scale security projects from inception to completion.

Cloud & DevSecOps Engineering

• Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures).
• Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible).
• Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm.

Problem Solving & Leadership

• Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents.
• Agile mindset with the ability to adapt quickly to evolving security threats and business priorities.
• A proven passion for tackling complex technological challenges and driving innovative solutions.

Nice to have

Advanced Security & Certifications

• Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC).
• Deep understanding of Public Key Infrastructure (PKI), including lifecycle management and cryptographic principles.
• Technical expertise in Identity and Access Management (IAM) implementations and authentication protocols (e.g., SAML, OAuth, MFA, 2SV).

Observability & Advanced Tooling

• Hands-on experience with modern observability and telemetry stacks for monitoring and logging (e.g.,OpenTelemetry, Prometheus).
• Advanced proficiency with infrastructure templating languages and configuration tools (e.g., Helm Charts).

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Role Overview 

As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments.

Key Responsibilities

• Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability.
• Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices.
• Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps.
• Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve.
• Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient.

Qualifications

Core Security & Architecture

• 8+ years of professional experience in the cybersecurity industry.
• Deep expertise in security principles across infrastructure, applications, data layers, and integration points.
• Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC).
• Track record of successfully managing complex, large-scale security projects from inception to completion.

Cloud & DevSecOps Engineering

• Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures).
• Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible).
• Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm.

Problem Solving & Leadership

• Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents.
• Agile mindset with the ability to adapt quickly to evolving security threats and business priorities.
• A proven passion for tackling complex technological challenges and driving innovative solutions.

Nice to have

Advanced Security & Certifications

• Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC).
• Deep understanding of Public Key Infrastructure (PKI), including lifecycle management and cryptographic principles.
• Technical expertise in Identity and Access Management (IAM) implementations and authentication protocols (e.g., SAML, OAuth, MFA, 2SV).

Observability & Advanced Tooling

• Hands-on experience with modern observability and telemetry stacks for monitoring and logging (e.g.,OpenTelemetry, Prometheus).
• Advanced proficiency with infrastructure templating languages and configuration tools (e.g., Helm Charts).

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat Intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat Intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

We provide flexible arrangements to our remote contract talents with:

• Work from home to help you find the perfect balance between work, family and personal life
• Paid holidays and leave so you won’t miss out any important events
• Team building & offsite events to bring our global team closer
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Option to choose to be paid in fiat or crypto currency, providing the flexibility to shape your financial freedom

#LI-CH1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Overview

We are seeking a Security Architect with a bias for action mindset. You will work closely with other Security professionals to identify security risks and develop strategies to mitigate them. You will be responsible for designing and implementing security solutions that protect BitMEX's data, systems, and infrastructure from potential threats.

Key Responsibilities

• Accountable for designing and engineering strategic security solutions.
• Develop Zero Trust Architecture design requirements through sound design. methodology, adequate security control application, and effective configuration practices.
• Reviewing current system security measures and recommending and implementing enhancements  as well as reporting and resolving technical debt.
• Conducting threat and vulnerability analysis as part of the security design and solution engineering process.
• Promptly responding to all security incidents and providing thorough post-event analyses.

Qualifications

• 15+ years of security industry experience, 8+ years in an appsec role
• Working knowledge of Amazon Web Services,
• Hands on experience with the top Cloud concerns:Identity and Access Management
• Hands on experience Secrets and Credentials Management solutions
• Hands on experience with centralized Logging
• Hand on experience with container Security
  Incident Response, Disaster Recovery and Cloud Forensics
• Cloud automation frameworks like Terraform, Ansible, Chef etc. is also a plus

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

We provide flexible arrangements to our remote contract talents with:

• Work from home to help you find the perfect balance between work, family and personal life
• Paid holidays and leave so you won’t miss out any important events
• Team building & offsite events to bring our global team closer
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Option to choose to be paid in fiat or crypto currency, providing the flexibility to shape your financial freedom

#LI-CH1

Overview

We are seeking a Security Architect with a bias for action mindset. You will work closely with other Security professionals to identify security risks and develop strategies to mitigate them. You will be responsible for designing and implementing security solutions that protect BitMEX's data, systems, and infrastructure from potential threats.

Key Responsibilities

• Accountable for designing and engineering strategic security solutions.
• Develop Zero Trust Architecture design requirements through sound design. methodology, adequate security control application, and effective configuration practices.
• Reviewing current system security measures and recommending and implementing enhancements  as well as reporting and resolving technical debt.
• Conducting threat and vulnerability analysis as part of the security design and solution engineering process.
• Promptly responding to all security incidents and providing thorough post-event analyses.

Qualifications

• 15+ years of security industry experience, 8+ years in an appsec role
• Working knowledge of Amazon Web Services,
• Hands on experience with the top Cloud concerns:Identity and Access Management
• Hands on experience Secrets and Credentials Management solutions
• Hands on experience with centralized Logging
• Hand on experience with container Security
  Incident Response, Disaster Recovery and Cloud Forensics
• Cloud automation frameworks like Terraform, Ansible, Chef etc. is also a plus

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Overview

We are seeking a Security Architect with a bias for action mindset. You will work closely with other Security professionals to identify security risks and develop strategies to mitigate them. You will be responsible for designing and implementing security solutions that protect BitMEX's data, systems, and infrastructure from potential threats.

Key Responsibilities

• Accountable for designing and engineering strategic security solutions.
• Develop Zero Trust Architecture design requirements through sound design. methodology, adequate security control application, and effective configuration practices.
• Reviewing current system security measures and recommending and implementing enhancements  as well as reporting and resolving technical debt.
• Conducting threat and vulnerability analysis as part of the security design and solution engineering process.
• Promptly responding to all security incidents and providing thorough post-event analyses.

Qualifications

• 15+ years of security industry experience, 8+ years in an appsec role
• Working knowledge of Amazon Web Services,
• Hands on experience with the top Cloud concerns:Identity and Access Management
• Hands on experience Secrets and Credentials Management solutions
• Hands on experience with centralized Logging
• Hand on experience with container Security
  Incident Response, Disaster Recovery and Cloud Forensics
• Cloud automation frameworks like Terraform, Ansible, Chef etc. is also a plus

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1