Skip to content

GRC

[GRC] Principal/Lead Crypto Capital Risk Engineer

Bybit logoBybitKuala Lumpur, MalaysiaPosted 3mo ago

The full posting

About Us

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 - connecting users to the future of digital finance.

Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.

Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.

Job Responsibilities

  • Responsible for building risk control capabilities for deposit/withdrawal and on-chain fund operation scenarios, covering core processes such as wallet transactions, signing pipelines, staking/redemption, and cross-chain bridge transfers.
  • Design and implement blockchain transaction risk control strategies, including risk identification, rule validation, anomaly interception, and pipeline consistency assurance.
  • Build a risk control decision engine, supporting the implementation of rule engines, decision trees, and strategy orchestration in fund security scenarios, forming a unified risk control capability covering on-chain fund operations.
  • Collaborate closely with wallet, asset, and security teams to continuously improve the security, traceability, and system stability of fund pipelines.

Job Requirements

  • 5+ years of backend development experience; proficient in at least one of Go / Node.js; familiar with high-concurrency architecture (microservices, message queues, caching, rate limiting) and MySQL, Redis.
  • Proficient in at least one public blockchain (Ethereum / Bitcoin / BSC); familiar with on-chain querying (Web3.js / Ethers.js / The Graph); able to read Solidity contract code; knowledgeable about HD wallets, multi-sig, MPC, and other wallet technologies.
  • 5+ years of risk control development experience in internet/finance/blockchain/payments; practical experience with rule engines or decision trees; has led or deeply participated in building deposit/withdrawal risk control systems.
  • Deep understanding of fund security; familiar with signing mechanisms, transaction validation, and security risk control solutions.

Nice to Have

  • Hands-on risk control experience at platforms with tens of millions of DAU or millions of daily transactions.
  • Experience in emergency response to major security incidents (hacking attacks, coin theft, fund anomalies).
  • Experience building a risk control system from scratch (0 to 1).

Why Join Us

At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include:

  • Study Growth Fund: We support your professional development and continuous learning.
  • Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
  • Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
  • Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
  • Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

Text as Bybit published it; last compared with the original on 11 Nov 2026.

The application

Your details and CV, then 12 questions (3 written).

Have readyCVCover letter (optional)
  1. 1.
    Are you legally authorized to work Kuala Lumpur where this role is based?Yes or no
  2. 2.
    What is your current location (City & Country)?Short answer · optional
  3. 3.
    Are you open to relocation for this role?Yes or no
  4. 4.
    What is your earliest available start date?Short answer · optional
  5. 5.
    What is your current employment status?Pick one: Employed · Unemployed · Freelance · Student
  6. 6.
    What is your highest level of education?Pick one: High School · Bachelor · Master · PhD · Other
  7. 7.
    Do you have at least 5 years of backend development experience; proficient in at least one of Go / Node.js. If yes, please elaborate further.Written answer
  8. 8.
    Are you familiar with high-concurrency architecture (microservices, message queues, caching, rate limiting) and MySQL, Redis? s? If yes, please elaborate.Written answer
  9. 9.
    Do you have at least 5+ years of risk control development experience in internet/finance/blockchain/payments; practical experience with rule engines or decision trees; has led or deeply participated in building deposit/withdrawal risk contrWritten answer
  10. 10.
    What is your current base salary per month (in MYR)?Short answer
  11. 11.
    What is your expected base salary per month (in MYR)?Short answer
  12. 12.
    Please confirm that the information provided is true and complete.Yes or no

Taken from Bybit's application form as it stood on 11 Nov 2026.

The employer: Bybit

Bybit runs a global crypto exchange; its security staff cover cloud and application security, red teaming, smart contract audits and security compliance.

Pay and benefits: Staff roles in Kuala Lumpur and Hong Kong, plus a security audit internship.

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Bybit posts a security role

We read Bybit's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.