Senior Security Engineer

Wallex is a FinTech company providing a secure cryptocurrency exchange platform and digital asset payment solutions.
With a vision to become a leading global FinTech enterprise, Wallex is recognized as one of the largest cryptocurrency exchange platforms in Iran, supporting the online trading of over 130 cryptocurrencies.

We are looking for a technically strong and security-focused Application Security Engineer to help secure our products, infrastructure, and development lifecycle. This role is ideal for someone passionate about offensive security, secure software design, and building scalable security practices within modern engineering environments.

Requirements:

• Deep understanding of the OWASP Top 10 and API Security Top 10, including exploitation and mitigation of vulnerabilities such as IDOR, insecure deserialization, injection attacks, broken authentication/authorization, cryptographic failures, and security misconfigurations.
• Solid knowledge of modern cryptographic primitives and their real-world usage, including asymmetric encryption/signing, message authentication codes, hash functions, and secure key management.
• Hands-on experience integrating security into CI/CD pipelines, including SAST, DAST, SCA, container/image scanning, and IaC security.
• Ability to perform structured threat modeling and lead security design reviews.
• Proven ability to conduct manual and automated penetration testing on web, API, and distributed systems.
• Strong experience in white-box code reviews to identify logic flaws and security anti-patterns.
• Proficiency in languages such as Go, JavaScript, and TypeScript, with the ability to build internal security tools.
• Good understanding of Linux systems, Bash scripting, and networking fundamentals.
• Minimum 3 years of relevant experience in application security.

Nice to Have:

• Understanding of both EVM and non-EVM blockchains, including wallet and key management.
• Experience with modern backend architectures, including microservices, caching layers (e.g., Redis), message queues (e.g., Kafka), and distributed system challenges.

Benefits:

• Health insurance
• Opportunities for professional growth
• Flexible working hours
• Military service exemption

We build, not watch — This is where you belong!