Staff Engineer, Security Platform Development

OKX
Hong Kong, Singapore
Full timeFunction: Solutions Engineering & Sales EngineeringSkills: ["Ownership","Communication","Product instinct","Engineering execution","Persistence"]

Own the build-out of a security engineering and DevSecOps platform, including SDKs/Agents that embed protection throughout the software lifecycle. Lead runtime protection using RASP and a Java Agent with bytecode instrumentation and continuous tuning. Integrate SAST/DAST/IAST/SCA and code/image scanning into CI/CD, then design offense/defense capabilities for common web and API threats. Apply LLMs/AI agents to vulnerability analysis and remediation, while partnering across engineering and SRE teams to raise security delivery quality.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
OKX
OKX
1 day ago

Staff Engineer, Security Platform Development

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Own the build-out of a security engineering and DevSecOps platform, including SDKs/Agents that embed protection throughout the software lifecycle. Lead runtime protection using RASP and a Java Agent with bytecode instrumentation and continuous tuning. Integrate SAST/DAST/IAST/SCA and code/image scanning into CI/CD, then design offense/defense capabilities for common web and API threats. Apply LLMs/AI agents to vulnerability analysis and remediation, while partnering across engineering and SRE teams to raise security delivery quality.
Location: Hong Kong, Singapore
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Architect and build an end-to-end DevSecOps security platform and the SDKs/Agents behind security products across code, build, artifacts, images, deployment, and runtime.
  • •Lead runtime protection using RASP and a Java Agent with bytecode instrumentation, runtime hooking, and detection/interception engines.
  • •Integrate scanning capabilities across SAST/DAST/IAST/SCA, code scanning, and image scanning; embed tools into CI/CD and close the loop from detection to blocking and remediation.
  • •Design detection, remediation, hardening, and counter-measures for vulnerabilities including XSS, SQL injection, SSRF, deserialization, command execution, auth flaws, and API security issues.
  • •Apply LLMs and AI Agents to vulnerability analysis and automation, and embed as the security technical expert within engineering teams to drive standards and release gates.

Pay and Benefits

Perks:Health InsuranceLearning BudgetMeal AllowancesWellness Stipend

Key Requirements

  • •Strong computer science and security fundamentals across operating systems, networking, compilers/JVM, distributed systems, application and cloud-native security, and supply chain security.
  • •Expert-level Java with hands-on depth in the JVM, ClassLoader, Java Agent, ASM, ByteBuddy, bytecode instrumentation, and performance profiling/tuning; proficiency in Python or Go.
  • •Production experience building and scaling RASP, SAST, DAST, IAST, SCA, image security, and code scanning capabilities.
  • •Real offensive and defensive application security experience, including exploitation paths, detection/bypass logic, and fixes for common web, API, and microservices vulnerabilities.
  • •Fluency with LLMs and AI Agents, including evaluation methods, agent architecture/tool calling, and how AI reshapes security engineering and the attack surface.
Skills:OwnershipCommunicationProduct instinctEngineering executionPersistence
Languages:English
Tech Stack:JavaPythonGoJVMClassLoaderASMByteBuddyInstrumentationRASPSASTDASTIASTSCASonarQubeCoverityCI/CDLLMsAI AgentsSDKsAgents

Company Brief

OKX
Global cryptocurrency exchange and Web3 technology provider offering spot and derivatives trading, custody, wallet services, and blockchain infrastructure to retail and institutional users worldwide.
Industry: Trading Platforms
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Victoria, Seychelles
Founded: 2017
WebsiteLinkedIn