Red Team Engineer
Bithumb helps users trade cryptocurrencies with Korean won through a centralized spot exchange with staking and lending services.
Funding history
Investors
About Bithumb
Bithumb is a cryptocurrency exchange platform serving South Korean and international traders with spot trading across multiple digital assets paired primarily with Korean Won. The platform provides trading tools including automated bots and API access, alongside payment services through Bithumb Cash that enable cryptocurrency transactions at retail merchants and e-commerce platforms. Users can generate passive income through staking programs and a coin rental service. Originally launched as Xcoin in 2014 and rebranded to Bithumb in 2015, the exchange operates as a licensed Virtual Asset Service Provider under South Korean financial regulators.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will perform penetration testing and Red Team activities across network, web, mobile, and cloud environments, execute and analyze adversary simulations, identify and reproduce vulnerabilities, develop exploits and custom payloads, and research attack techniques and threat trends.
Requirements
- At least 1 year of practical penetration testing experience
- Understanding and practical experience in penetration testing across network, web, mobile, and cloud environments
- Ability to develop exploits and custom payloads
- Ability to use Python for attack automation and tool development
- CVE discovery, bug bounty, or CTF experience
- Red Team experience in financial, public, telecommunications, or cloud environments
- Experience designing and using MITRE ATT&CK-based TTPs
- Vulnerability research presentation experience
- Threat modeling and attack surface analysis experience
- Cloud operations and security experience with AWS, Azure, or GCP
- IAM, network security, logging, and monitoring experience
- Container and Kubernetes security assessment experience
- Ability to develop security tools using C, C++, Go, or C#
Responsibilities
- Perform penetration testing and Red Team activities across network, web, mobile, and cloud environments
- Execute and analyze adversary simulation scenarios
- Identify, analyze, and reproduce vulnerabilities using proof of concept
- Develop exploits and custom payloads
- Research current attack techniques and threat trends
- Support TTP development and improvement
Benefits
- Flexible start and end times
- Welfare points
- Commuting transportation support for night and holiday work
- Breakfast, lunch, and dinner provided
- Unlimited snacks and drinks
- Housing loan interest or rent support
- Childcare cost support for preschool children
- Holiday and Parents' Day gifts
- Health examinations for employees and family members
- Group accident insurance
- Company club activity support
- Resort and condominium accommodation support
