The opportunity
The Identity & Security team owns the front door to Binance. We build and operate the registration, login, and account security experience used by every one of our 300M+ users — social login, OAuth and third-party authorization, multi-factor authentication, passkeys and FIDO2,…
What you'll do
Design, develop, and maintain the login, registration, and account security: applications across web and mobile clients
Build the in-house AI facial recognition security product end to end: KYC verification, liveness detection, face matching — replacing the existing third-party vendor solution
Build authentication capabilities end to end: passkeys / FIDO2 (WebAuthn), authenticator apps, security keys, SMS and email verification, and biometric flows
Own the multi-factor authentication orchestration layer: verification strategy, step-up logic, and user-level customization — balancing security strength against completion rate with measurable outcomes
Collaborate closely with the AI algorithm team to integrate facial: recognition, liveness detection, and other AI model capabilities into the product frontend and backend, building high-concurrency, low-latency online inference services
Maintain and evolve the shared security component and logic libraries: consumed by multiple product applications, and the authentication SDKs published to teams across the company; take responsibility for bundle size, initialization behavior, and backward compatibility
What they're looking for
- Develop and operate the Node.js server-side layer: server-side rendering, route-level authentication guards, session validation and redirects, localized routing, and first-paint performance
- Build and refine the BFF layer: aggregating upstream security services and turning raw error codes into results the frontend can consume and users can act on
- Implement platform-specific behavior for web, mini program, and low-end: device targets while keeping shared and platform-specific code cleanly separated
- Drive engineering quality: unit and end-to-end test coverage, instrumentation and observability, build and local development experience