Role Overview 

As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments.

Key Responsibilities

• Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability.
• Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices.
• Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps.
• Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve.
• Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient.

Qualifications

Core Security & Architecture

• 8+ years of professional experience in the cybersecurity industry.
• Deep expertise in security principles across infrastructure, applications, data layers, and integration points.
• Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC).
• Track record of successfully managing complex, large-scale security projects from inception to completion.

Cloud & DevSecOps Engineering

• Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures).
• Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible).
• Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm.

Problem Solving & Leadership

• Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents.
• Agile mindset with the ability to adapt quickly to evolving security threats and business priorities.
• A proven passion for tackling complex technological challenges and driving innovative solutions.

Nice to have

Advanced Security & Certifications

• Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC).
• Deep understanding of Public Key Infrastructure (PKI), including lifecycle management and cryptographic principles.
• Technical expertise in Identity and Access Management (IAM) implementations and authentication protocols (e.g., SAML, OAuth, MFA, 2SV).

Observability & Advanced Tooling

• Hands-on experience with modern observability and telemetry stacks for monitoring and logging (e.g.,OpenTelemetry, Prometheus).
• Advanced proficiency with infrastructure templating languages and configuration tools (e.g., Helm Charts).

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Role Overview 

As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments.

Key Responsibilities

• Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability.
• Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices.
• Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps.
• Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve.
• Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient.

Qualifications

Core Security & Architecture

• 8+ years of professional experience in the cybersecurity industry.
• Deep expertise in security principles across infrastructure, applications, data layers, and integration points.
• Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC).
• Track record of successfully managing complex, large-scale security projects from inception to completion.

Cloud & DevSecOps Engineering

• Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures).
• Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible).
• Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm.

Problem Solving & Leadership

• Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents.
• Agile mindset with the ability to adapt quickly to evolving security threats and business priorities.
• A proven passion for tackling complex technological challenges and driving innovative solutions.

Nice to have

Advanced Security & Certifications

• Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC).
• Deep understanding of Public Key Infrastructure (PKI), including lifecycle management and cryptographic principles.
• Technical expertise in Identity and Access Management (IAM) implementations and authentication protocols (e.g., SAML, OAuth, MFA, 2SV).

Observability & Advanced Tooling

• Hands-on experience with modern observability and telemetry stacks for monitoring and logging (e.g.,OpenTelemetry, Prometheus).
• Advanced proficiency with infrastructure templating languages and configuration tools (e.g., Helm Charts).

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Datadog’s Implementation Services team helps customers implement and deploy Datadog quickly. Our team of architects leads the discovery, design, build, and launch of the Datadog platform to help customers accelerate time to value and get the most out of their investment. As a member of our team, you will be responsible for developing the technical roadmap for a customer’s implementation, and leading them through it every step of the way.   

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do:

• Design and guide execution of Datadog implementations, including gathering requirements, building technical architecture, and supporting deployment and launch
• Guide customer onboarding through co-development working sessions and assist when they run into roadblocks
• Write automation and design architecture for deployment templates 
• Manage the operation of implementation projects 
• Collaborate with other teams, including Customer Success, Technical Account Management, and Sales to deliver an exceptional onboarding experience

Who You Are:

• Experience designing and delivering technical solutions for DevOps Monitoring or architecture systems
• Hands-on experience with cloud platforms (AWS, Azure, GCP) and compute technologies (EC2, serverless, VMware, VMs, Docker, Kubernetes).
• Experience with Config Management, IAC and CI/CD tools, including Ansible, Puppet, Terraform, Chef, Jenkins, Circle CI, GitHub Actions, Azure Pipelines, etc…
• Experience programming/scripting with any of the following: Java, Python, Ruby, Go, Node.JS, PHP, and .NET etc
• Successful track record with 5+ years experience as an Architect or Consultant in a professional services team
• Able to sit up to 4 hours, traveling to and from client sites 
• Able to travel via auto, train or air up to 30% of the time

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth:

• Best-in-breed onboarding
• Generous global benefits
• Intra-departmental mentor and buddy program for in-house networking
• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)
• Continuous professional development, product training, and career pathing
• An inclusive company culture, able to join our Community Guilds and Inclusion Talks

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.

#LI-Hybrid

Role Purpose

As a Senior Backend Software Engineer (Fixed Term Contract) within Boku’s Engineering organisation, you will be one of a small group of engineers delivering new products as part of Boku’s Innovation department. A new suite of products being built from the ground up. This is a greenfield development engagement: the work is scoped to designing and building new software, not maintaining or extending existing production services. You will work in a small, high-autonomy team with a clear remit and a defined delivery horizon, reporting to the Head of Product and Engineering.

Key Responsibilities

Backend Engineering

• Design and build production-grade services using Java and Spring Boot, targeting high throughput, low latency, and high availability (99.99%+).
• Implement and evolve RESTful/gRPC/MCP and event-driven APIs supporting payment initiation, callback handling, reconciliation, and settlement flows.
• Build for fault tolerance and resilience: circuit breakers, retry logic, idempotency, and graceful degradation under load. Maximum observability and telemetry at the core of the build to ensure easy support.
• Optimise service performance through profiling, load testing, and careful data access layer design (SQL and NoSQL).
• Collaborating with colleagues and off-shore development teams providing code-reviews and guidance as necessary to team members and development studios.

Payment Systems

• Build the core components of Payout, Card Processing and FX systems from scratch, including a payout processing engine, AI agent treasury orchestration layer, and cash forecasting service. This work is entirely new development and there is no existing codebase to maintain or inherit.
• Contribute to PCI DSS compliant system design and implementation, including sensitive data handling, audit logging, and access control.

Frontend Contribution

• Contribute React-based frontend components for internal tooling, operational dashboards, and merchant-facing interfaces where required.
• Work with Product and Design to deliver functional, well-tested UI features that meet Boku's quality bar.

FX & Treasury Integration (Desirable)

• Support integration with FX data sources including Bloomberg feeds, for use in real-time rate pricing, settlement FX, and treasury risk tooling.
• Contribute to cash position and FX exposure monitoring services, working alongside Finance and Treasury stakeholders.

Reliability & Operations

• Instrument projects with observability from day one: structured logging, distributed tracing, metrics, and alerting built as part of the product, not retrofitted. On-call and incident management for existing Boku production services are outside the scope of this contract.
• Instrument services with structured logging, distributed tracing, and metrics; contribute to SLO/SLA definitions and alerting.
• Set up CI/CD pipelines, container build configuration (Docker/EKS), and code quality gating (SonarCloud, SAST) as new infrastructure built to Boku’s engineering standards and handed over as part of the finished product.

Key Skills, Experience and Competencies

Required

• 5+ years of backend engineering experience, with deep expertise in Java and the Spring Boot ecosystem (Spring MVC, Spring Data, Spring Security).
• Demonstrable experience building and operating high-throughput, high-availability distributed payment or financial services systems.
• Strong understanding of payment system architecture: idempotency, exactly-once delivery, reconciliation, and settlement flows.
• Experience with relational databases (PostgreSQL, MySQL) and messaging systems (Kafka, RabbitMQ, or equivalent).
• Familiarity with container-based deployment (Docker, Kubernetes/EKS) and CI/CD pipeline tooling (GitHub Actions or equivalent).
• Experience with PCI DSS compliant system design and secure coding practices.
• Strong communication skills; ability to work effectively with Product, Architecture, and Operations in a globally distributed team.

Preferred

• React frontend development experience sufficient to contribute to internal tooling and dashboards.
• Experience integrating with Bloomberg data feeds (BFIX, B-PIPE, or similar) or other real-time FX data sources.
• Background in FX processing, treasury systems, or multi-currency settlement.
• Experience with financial messaging standards (ISO 20022, SWIFT MT/camt formats).
• Prior work in a payments processor, PSP, or fintech operating across multiple markets.

AI & Agentic Systems

• Practical experience building or integrating LLM-powered features into production services, including prompt engineering, tool/function calling, and structured output handling via APIs such as Anthropic or OpenAI. Familiarity with AWS Bedrock is ideal.
• Experience designing or contributing to agentic workflows: multi-step autonomous processes where models plan, call tools, and act on results — including handling retries, failure modes, and human-in-the-loop checkpoints.
• Familiarity with MCP (Model Context Protocol) or similar tool-use frameworks for connecting AI models to internal APIs, databases, and external services.
• Comfortable using AI-assisted development tooling (e.g. Claude Code, GitHub Copilot, Cursor) as part of day-to-day engineering workflow, and able to reason critically about where AI assistance adds value versus where it requires human judgement.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
• 5+ years of professional software engineering experience in backend-heavy roles.
• Prior experience in a regulated financial services or payment processing environment strongly preferred.

Why Join Boku?

Impact: Work on payment infrastructure that processes billions of dollars annually, serving some of the world's largest digital commerce platforms across 65 countries.

Focus: A fixed term engagement with a clearly scoped remit, embedded within a high-calibre engineering team operating on greenfield and core platform work.

Culture: A collaborative, inclusive engineering culture that values craft, rigorous thinking, and delivery. Boku is a genuinely global company with deep expertise in local payment markets.

Benefits: Competitive day rate, flexible working arrangements, and Singapore-based team with global stakeholder exposure.

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat Intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

Senior Penetration Tester

If you’re passionate about security and privacy, and want to use your offensive security skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. 

Who you are

You’re a natural at solving problems and identifying security weaknesses with deep expertise in application security and infrastructure, and you have experience working on teams that know how to remediate vulnerabilities you identified based on your recommendations. You aren’t afraid of change, and you ask the questions that need to be asked. A lack of clarity is something you can’t settle for, and you voice your concerns when the balance between effort and impact seems off. 

As someone with an offensive security mindset, you know there are always vulnerabilities waiting to be found, and you’re naturally collaborative to help find and address them. You’re always willing to hear ideas from your colleagues. Likewise, you're willing to share your own knowledge and mentor others. 

What you’ll do

As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:

• Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, London, Germany and Bucharest.
• We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our tech stack.
• You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.
• Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities
• Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these 
• Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated
• Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions. Identify areas where automated testing can be done, then develop, maintain and continuously improve tools to support these automated tests
• Mentor, guide and support other team members using your strong technical knowledge
• Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion

This role focuses strongly on your ability to perform penetration testing (with a specialization in either desktop and server applications, infrastructure, and mobile apps, depending on your experience). To be a good fit for this role, you should be able to read source code in various languages, identify security weaknesses and vulnerabilities in various platforms and efficiently deliver security assessment projects while mentoring junior team members. Networking knowledge is critical to succeed in this role.

What you’ll bring

• Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED
• Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system
• Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concepts
• Experience writing automation workflows such as Github Actions
• Provide mentorship and guidance to other team members and share knowledge and findings with them
• Good knowledge of:
• TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering
• Cryptography: PGP, SSH, PKI

How you’ll succeed

• Your capacity to consistently identify security vulnerabilities and provide sound remediation strategies alongside our engineering teams is key to success in this role
• You’ll be assigned as a security lead across a number of our projects, and will need to mentor more junior team members and help them grow their skillset
• Your ability to design technical solutions while staying ahead of industry trends will help drive continued security improvement, especially when supporting secure engineering designs

Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.

How we’ll support you

We believe in fostering an environment that empowers decision-making at all levels. Our culture is rooted in the inverted pyramid approach, where the engineers, who have a deep understanding of the product and the customers, are the ones who have the knowledge and the authority to make impactful decisions. 

• We prioritize treating every team member with respect and promote open and constructive feedback, ensuring a culture of trust and transparency
• We encourage learning through experimentation and provide a safe space for everyone to learn from their experiences
• Our managers are dedicated to facilitating career growth and creating an environment that attracts and supports talented engineers

#LI-PS1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat Intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

We provide flexible arrangements to our remote contract talents with:

• Work from home to help you find the perfect balance between work, family and personal life
• Paid holidays and leave so you won’t miss out any important events
• Team building & offsite events to bring our global team closer
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Option to choose to be paid in fiat or crypto currency, providing the flexibility to shape your financial freedom

#LI-CH1

Overview

This is an opportunity for an intermediate/senior level Offensive Security Professional to join our Product Security team. As an experienced researcher you will help maintain critical security systems within our architecture, as well as assisting the wider engineering and devops practices with their activities. In Product Security our mission is to continuously improve the security posture of BitMEX from the inside, and we are looking for someone capable and flexible who can work with our excellent staff on that mission!

A crypto trading exchange is a security environment that is fairly rare in the infosec industry: we regularly get attacked by nation-state APT groups, we have continuous attempts by everyone from script kiddies to our own users trying to find ways to illegitimately extract money from us, and we protect vast amounts of crypto. All at the same time having a software stack that requires extreme uptime, minimal latency, and absolute accuracy in how it takes and processes orders.

If you want to help protect an environment where the threats are very real and continuous, this is the job for you. We will check that you are not from the DPRK, be warned; it would not be the first (or second, or third) time.

Key Responsibilities

• Manage our bug bounty program, reviewing reports, engaging with researchers and cooperating with software engineering to fix bugs
• Reviewing the outcomes of external penetration tests, replicating issues and again, working with engineering to fix findings
• Conducting internal penetration tests on our software and infrastructure stack
• Red and purple team exercises to test our monitoring
• Security research & threat intelligence, working with security response
• Application security & code reviews, internal training of engineers
• Being part of incidents to help triage and investigate issues

Qualifications

• 5+ Years in Information Security.
• Proven expertise in offensive security either through certifications, recognition, or referees.
• Strong communication skills and work ethic: contribute actively to the company and become ‘known’
• Candidates with less experience will be considered for an Offensive Security Engineer position.

Nice to have

• Experience with Kubernetes, Istio, Envoy and the AWS cloud platform would be useful. Advanced skills in these (and affiliated technologies) are a bonus but not required.
• Experience with GitHub CI/CD / Actions and/or ArgoCD is a bonus but not required
• Experience with derivatives and cryptocurrency is a bonus but not required.
• Development expertise in Go is a bonus but not required

Why BitMEX?

BitMEX offers a dynamic environment that blends intense work, a vibrant culture, and diversity. We actively recruit across time zones to meet growing demands and attract top global talent.

We're seeking determined, responsible, and collaborative individuals to join us in building a leading cryptocurrency ecosystem. We value meticulousness, agility, and simplicity. As a 24/7 global exchange, we look for adaptable team players who can excel in a diverse, cross-market environment.

In addition, we offer an industry leading benefits package to our permanent employees. Here’s a peek into what we offer:

• Work from home to help you find the perfect balance between work, family and personal life
• 25 days of annual leave, on top of public holidays, as well as maternity, paternity and childcare leave… etc to accommodate your growing responsibilities
• A top tier & comprehensive medical, dental and vision policy for you and your dependents
• Professional development allowance to support your career advancement
• Access to our annual wellness benefits to cultivate your physical and mental growth
• Don’t forget the advantage of our Beyond Border Remote Working policy, where you get to work away from your home country
• Team building & offsite events to bring our global team closer
• Life insurance coverage to provide a safety net for your family’s future

#LI-CH1

DevOps Engineer

A CAREER WITH POINT72’S TECHNOLOGY TEAM

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.

WHAT YOU'LL DO

• Work closely with our development team to understand solution architecture and build requirements to properly build CI/CD pipeline templates
• Lead the implementation and optimization of CI/CD pipelines using GitHub Actions and support our legacy Jenkins pipelines during migration
• Implement and maintain secure build chains with software supply chain security controls, including dependency scanning, SBOM generation, and artifact signing
• Partner with security teams to implement DevSecOps practices, including automated vulnerability scanning and compliance checks
• Apply DevOps best practices in areas such as automated testing, configuration management, and release management
• Collaborate with cross-functional teams to ensure seamless integration and delivery of software solutions
• Troubleshoot and resolve complex technical issues related to the SDLC platform
• Provide day-to-day support to development and operations teams, including participating in on-call rotations and incident escalation

WHAT'S REQUIRED

• 5+ years of experience in software development and operations, focused on cloud-native DevOps practices
• Deep understanding of SDLC principles, methodologies, and best practices
• Expert knowledge of Jenkins including experience using pipeline as code (Groovy) or expert knowledge of other CI/CD engines, such as TeamCity, Gitlab, and/or Github Actions
• Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible
• Experience with containerization and orchestration technologies like Docker and Kubernetes
• Experience with vulnerability scanning, SAST/DAST tools, and dependency management
• Strong scripting skills including Python, Bash, and PowerShell
• Excellent communication and collaboration skills with a data-driven approach to decision-making
• Commitment to the highest ethical standards.

We take care of our people
We invest in our people, their careers, their health, and their well-being. When you work here, we provide:

• Health care benefits
• Generous parental and family leave policies
• Mental and physical wellness program
• Volunteer opportunities
• Non-profit matching gift program
• Support for employee-led affinity groups representing women, minorities and the LGBT+ community
• Tuition assistance

ABOUT POINT72
Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit https://point72.com/.

About the Role

To ensure someone can be effectively supported throughout the intern we cn only look to hire an intern in either Singapore or in Europe.

You'll work remotely within our Middle-end / Tooling team, focusing on improving the observability of Dune, the OCaml build system. This isn't about cosmetic changes; it's about digging into Dune's core to expose how it builds things, making complex OCaml projects more understandable.

Responsibilities

• Dive into the Dune codebase, identify areas where the build rules are translated into actions.
• Implement modifications directly in Dune's source code to expose fine-grained information about builds.
• Develop and contribute pull requests to the upstream `ocaml/dune` project, working with the maintainers.
• Experiment with your changes and new tooling on real, large-scale industrial OCaml codebases to validate their usefulness.
• Collaborate asynchronously with the team.

Requirements

Must have:

• Solid OCaml programming skills. You need to be comfortable reading, understanding, and writing idiomatic OCaml.
• Experience with basic Git and GitHub workflows (branching, committing, pull requests, code reviews).
• Good written and verbal English communication skills for collaborating with a remote, async team and upstream maintainers.

Nice to have:

• Prior experience using more than one build system (e.g., Cargo, Make, Bazel, SCons, Nix, etc.).

What Success Looks Like

You've made significant contributions to Dune, resulting in working prototypes or even merged changes for a
tool that clarifies what happened during a build and why. This could involve exposing new internal Dune data
structures or developing a basic analysis tool on top, verified on an industrial codebase.

Who We Are 

Build. Scale. Sustain.  

We are a global technology consultancy with a trademarked, AI-first engineering approach for accelerating the delivery of digital products, and revolutionizing platform modernization. We do the right thing, and we do it right. We're proud to be a World Economic Forum New Champion, and a B Corp-certified company. 

• We are small enough to care locally, big enough to deliver globally: 5 continents, 10 countries, +500 experts from +50 nationalities across the Americas, Europe and APAC
• We are robust and resilient: 100% independent and 0 debt
• We are entrepreneurs and passionate experts: We invest in what we believe genuinely and work as a collective intelligence 
• We are positive, courageous, caring, doers and committed to excellence 

About Gen-e2TM 
 
While the market is still largely AI-augmenting delivery, we have reinvented the SDLC to be AI First. Leveraging our 16 years expertise in digital transformation, our approach is a game-changer in productivity and quality, with a strong collaboration between IA generative and our best Talents: 

• We now generate 95% of the entire product — code, documentation, infrastructure as code, and even design powered by GitHub Copilot. 
• The quality consistently exceeds the output of our best traditional engineering teams.
• A product repository houses all product artefacts, giving AI full project context for higher-quality generation.
• A library of rules and prompts defines coding standards, design principles, and security guidelines, ensuring enterprise-grade quality and scalability. 

With Gen-e2TM, we deliver end-to-end products 2–3× faster than traditional approaches, while raising the bar for engineering excellence. 

YOUR ROLE AND RESPONSIBILITIES 

As a member of an Agile delivery team, you will be responsible for the design and execution of test automation and quality engineering activities across Web, API, Mobile, Cloud, and Data platforms. You will define and implement test strategies with the team in applying automation, exploratory, performance, and data pipeline testing practices effectively. 

You will: 

• Be responsible for building and maintaining scalable automation frameworks for Web, API, Mobile, Cloud, and Data systems.
• Define and execute test strategies, balancing automation, exploratory, performance, and data testing.
• Implement automation scripts using tools such as Selenium, Playwright, Cypress, Appium, and Katalon.
• Design and execute tests for data platforms, including ETL pipelines, data quality, schema validation, and transformation logic.
• Apply structured test approaches for data engineering workflows (batch vs. streaming, ingestion, transformation, storage, and consumption).
• Integrate automated tests into CI/CD pipelines and ensure reliable execution.
• Perform exploratory testing to uncover gaps not easily detected by automation.
• Support performance, scalability, and reliability testing using tools like JMeter, Gatling, or k6.
• Apply AI-powered QA tools and prompt engineering techniques to accelerate test creation and analysis.
• Collaborate closely with developers, product owners, and business analysts to ensure requirements are testable and automation-ready.

WHO YOU ARE 

• Strong experience in test automation, framework design, and quality engineering.
• Solid background in functional and automation testing across Web, API, Mobile, Cloud, and Data platforms.
• Strong in hands-on coding in Java, JavaScript, Python, or similar languages for automation.
• Hands-on experience in mobile automation testing with Appium and/or Katalon.
• Exposure to performance and load testing.
• Experience with AI/ML-driven test tools and basic prompt engineering.
• Strong background in exploratory testing and modern test design techniques.
• Good understanding of Agile/Scrum delivery.
• Familiarity with CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI) and cloud-native testing (AWS, Azure, GCP).
• Excellent collaboration and problem-solving skills. 

BONUS SKILLS 

• Knowledge of data platform & data engineering pipeline testing (ETL validation, streaming, data quality).
• Experience with big data test strategies and analytics validation. 

We will be prioritizing applicants who have a current right to work in Singapore, and do not require sponsorship of a visa. 

More About PALO IT 

We’re eager to adapt to change, learn from our experiences and move to meet our planet’s urgent needs. We are continuously taking action to: 

• Become a climate net-zero company  
• Deliver projects with a positive impact
• Train 100% of our workforce on impact   
• Achieve B Corp certification among all our offices across the globe   
• Continuously measure & improve employee happiness  

Our clients are amongst the world's most successful companies. We innovate with both established Fortune 1000s, SMEs and start-ups who aim to make an impact, become global leaders and address the world's most complex challenges. 

What We Offer 

• Stimulating working environments
• Unique career path
• International mobility  
• Internal R&D projects
• Knowledge sharing
• Personalized training
• Entrepreneurship & intrapreneurship 

For more on our team culture and benefits, check out our careers page.

PALO IT Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Palo IT SG does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Palo-IT.

Your personal data will be processed for the purposes of managing Palo-IT’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

We are hiring for one of our clients. They are a fast-growing Web3 startup rethinking how digital identity and reputation work online. They’re building privacy-first infrastructure that lets users prove who they are and what they’ve done—without giving up personal data. Backed by strong ecosystem partners and a passionate founding team, the company is shaping a more trusted and user-centric internet.

We are seeking a Senior Quality Assurance (QA) Lead to own and elevate quality across the product lifecycle. You will define the QA strategy, and partner closely with Product, Engineering, and Design to ship reliable, secure, and delightful features.

Responsibilities

• Own end-to-end quality across the product suite — from defining QA strategy and test plans to hands-on execution, reporting, and continuous improvement.
• Shape the QA roadmap by setting up effective testing processes, tools, and metrics, ensuring smooth release cycles and data-driven quality tracking.
• Collaborate early and often with product and engineering to refine requirements, user flows, and acceptance criteria — advocating for testability and great user experiences.
• Plan and execute testing at every level (manual and automated): API, UI, integration, regression, and smoke — ensuring solid coverage and reliability.
• Drive smart automation — identify high-value test cases for automation and maintain stable, scalable test suites.
• Track and communicate quality metrics such as defect trends, coverage, and release health to keep the team aligned and proactive.
• Champion a shift-left mindset by embedding QA practices early in discovery and development, and helping engineers take ownership of quality.
• Oversee release readiness — from environment setup and data prep to go/no-go decisions and post-release validation.
• Lead defect management — prioritize fixes, uncover root causes, and turn insights into prevention and process improvements.
• Mentor and scale the QA function, building documentation, standards, and best practices that grow with the team.
• Partner with DevOps and Security to strengthen performance, reliability, and security testing — ensuring compliance and operational excellence.

Requirements

• 7+ years in QA/Software Quality roles with 2+ years leading QA initiatives or teams in a fast-paced product environment.
• Strong expertise in test strategy, risk-based testing, requirements analysis, and release management.
• Hands-on experience with test automation frameworks and tools (e.g., Playwright/Cypress/WebdriverIO, pytest/Jest, Postman/Newman, REST/GraphQL tools).
• Proficiency with CI/CD and version control (e.g., GitHub/GitLab Actions, Jenkins, CircleCI); experience integrating automated tests into pipelines.
• Solid understanding of modern web/mobile architectures, APIs, microservices, and cloud environments.
• Experience with non-functional testing: performance (e.g., k6, JMeter), reliability, accessibility, and security testing practices.
• Data-driven mindset with experience defining and reporting quality metrics and OKRs.
• Excellent communication and stakeholder management; able to translate technical quality issues into business impact and recommendations.

Nice to have

• Understanding of wallets and signing flows (e.g., MetaMask, WalletConnect, EIP-712 typed data), basic key management concepts.
• Exposure to smart contracts and EVM tooling (reading Solidity/ABIs, Foundry/Hardhat test basics, contract events).
• Experience testing dApp UX with wallet connectors, chain switching, and handling pending/confirmed/failed on-chain states.
• Awareness of token standards (ERC-20/721/1155), approvals/permits, and common failure modes (reverts, RPC errors, reorgs).
• Light exposure to wallet-aware E2E automation (e.g., Synpress or Playwright with mocked providers) is a plus.