Cloud Security Engineer

Job description

About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Key Responsibilities • Cloud Security Architecture and Hardening Design, implement, and continuously strengthen security architectures across public cloud environments, including AWS, Tencent Cloud, Huawei Cloud, and Alibaba Cloud. Areas of focus include container isolation, Identity and Access Management (IAM), VPC network segmentation, and security policies. • Security Operations and Incident Response Build and continuously improve cloud security monitoring and operations capabilities, including Security Information and Event Management (SIEM) and Cloud Security Posture Management (CSPM). Detect, investigate, and respond to security incidents, conduct root cause analysis and post-incident reviews, and drive remediation through to closure. • Infrastructure Security and Vulnerability Management Assess and harden cloud compute instances, containers, cloud services, and supporting infrastructure. Develop and enhance host and cloud vulnerability scanning capabilities, and track remediation to completion. • Identity and Access Management Design and maintain cloud IAM and Cloud Access Management (CAM) permission frameworks. Establish lifecycle management policies for credentials, including access keys and secret keys (AK/SK), API keys, and access tokens