Software Engineer

About BIT： BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group. Headquartered in Singapore and founded in 2019, BIT bridges traditional finance and digital assets through governance-driven financial services and technology. The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume. BIT offers services including custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets (RWA), serving institutional and professional investors globally. BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States and Bhutan. For more information, visit www.bit.com About the Role: We're hiring a Software Engineer focused on blockchain security and protocol design. You'll work at the intersection of cryptography, distributed systems, and adversarial security — redesigning and hardening wallet and core systems against protocol- and architecture-level threats. This is a builder's role for someone who thinks like an attacker and designs like an engineer. What You'll Do: Protocol Analysis & Design • Analyze and evaluate how mainstream blockchain protocols work under the hood (Ethereum/EVM, Cosmos SDK, Substrate, Solana, etc.), and redesign wallet systems grounded in secure cryptographic mechanisms. • Develop hardening and mitigation plans for the wallet system against known protocol-level vulnerabilities and emerging risks. System Security Re-architecture & Hardening • Drive security-requirement-driven re-architecture and maintenance of existing software systems. • Embed security assumptions at the architecture level, designing and implementing defense-in-depth for critical modules to reduce single points of failure and ambiguous trust boundaries. Research, Audit & Response • Track cutting-edge blockchain attack techniques and defenses, and turn research into shippable system improvements. • Participate in or lead security audits of internal systems and open-source dependencies, driving remediation and architectural improvements. Background & Experience: • Bachelors degree or above preferred in Computer Science, Cryptography, or Network/Cyber Security. • Fresh graduate or up to 2 years of work experience. Core Technical Skills: • Development & architecture: Strong command of at least one systems-programming language among Java / Go / Rust / C++. Proficient in distributed systems design, concurrency models, and performance optimization. • Security domain knowledge: Familiar with threat modeling, secure coding standards, penetration-testing mindset, and supply-chain security. Key Soft Skills: • Security mindset & risk thinking: Operates on a "zero trust" principle by default and reasons systematically about attack surfaces. • Analysis & abstraction: Translates complex, ambiguous security requirements into clear, verifiable technical architecture and module designs. • Engineering craft & influence: Builds a security culture across the team through design docs, code reviews, and tech talks. Preferred Qualifications: • Deep understanding of the full technical stack of at least one mainstream blockchain (networking, consensus, execution, storage). Strong grasp of smart contract security and common vulnerability patterns. • Practical command of how public-key cryptography, hash functions, zero-knowledge proofs, and threshold signatures apply — and where their risks lie — in real systems. By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy. < https://www.bit.com/privacy-candidate >