Account Security Strategy Expert

This role serves as the ultimate guardian of user account and asset security. It focuses on preventing asset theft caused by social engineering fraud, phishing sites, AI face-swap bypasses, client-side malware hijacking, and post-account-takeover activities such as withdrawals and malicious wash trading. - Full-lifecycle Asset Protection: Own security strategy planning across the full user account lifecycle, including login, sensitive information changes, API key authorization, and fund transfers. Focus on designing anti-fraud and anti-account-takeover mechanisms to protect user assets. - Advanced Fraud and Phishing Defense: Design real-time risk detection and blocking strategies against inducement fraud, fake phishing websites, and social engineering attacks, based on user behavior sequences, fund flow patterns, and environmental signals. - AI Forgery and Human-Bot Defense: Address emerging security challenges brought by AI-generated fraud and impersonation. Work with algorithm teams to design anti-forgery strategies and secondary verification mechanisms. - Malware Hijacking and Environment Defense: Build multi-confidence defense strategies for high-risk scenarios such as client-side malware, malicious browser extensions, and session hijacking, using abnormal device fingerprints and unnatural behavior patterns. - Wash Trading Prevention and Fund Security Blocking: Establish real-time strategies to detect malicious wash trading after account takeover, enabling second-level identification and interception of abnormal counterparties and abnormal spread transactions. - Cross-functional Collaboration: Work closely with Product, Security Engineering, and Deposit/Withdrawal teams to upgrade account security infrastructure, including AI Agents and verification centers. - Bachelor’s degree or above in Computer Science, Information Security, Mathematics, Statistics, or a related field. - 5+ years of experience in account security, anti-fraud, or fund security in the blockchain or internet industry. - Strong technical and data capabilities, with proficiency in SQL and excellent multi-dimensional data extraction and analysis skills; able to independently investigate abnormal trading and login logs to identify hidden risk patterns. - Proficient in Python, with familiarity in common machine learning models or graph-based analysis applied to risk control scenarios such as fraud ring detection and abnormal transaction mining. - Deep understanding of emerging fraud tactics, including romance scams, impersonation of internal staff, phishing interception, malware hijacking, AI anti-forgery defense, and wash-trading-based money laundering, with strong hands-on experience in adversarial risk control. - Familiarity with cryptocurrency fundamentals and on-chain transaction analysis is a plus. - Experience in fund risk control, wash trading prevention, and anti-fraud strategy design for Web3 exchanges is preferred.