OKX

2 weeks ago

Staff Software Engineer, Mobile Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Own mobile application security across OKX’s iOS and Android stack by identifying and mitigating vulnerabilities through threat modeling, manual review, and automated tooling. Manage security tools, triage Bug Bounty reports, and drive remediation with engineering teams while producing clear security findings for both technical and management audiences. Apply AI-assisted workflows to accelerate research and automate detection, and actively participate in incident response to keep security a consistent priority.

Location: Hong Kong

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Identify and address security vulnerabilities in mobile code, systems, and networks via manual review, automated tooling, and threat modeling.
•Manage and optimize application security tools, processes, and alerts to maintain a strong security posture.
•Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams.
•Produce security findings reports and present them to technical and management audiences to prevent real-world attacks.
•Collaborate with development teams to champion secure coding practices across iOS and Android and participate in incident response.

Pay and Benefits

Perks:Health InsuranceMeal AllowanceLearning Budget

Key Requirements

•5+ years of experience in mobile application security or offensive security with hands-on expertise in iOS and/or Android.
•In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications.
•Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats.
•Ability to create proof-of-concepts (PoCs), review patch code against standards, and collaborate with repository owners on remediation.
•Actively uses AI tools in security engineering workflows (e.g., building AI-leveraged workflows/agents reliably for production work).

Experience:5+ yearsMobile applicationsOffensive securityApplication securityBug bounty

Skills:AnalyticalProblem-solvingVerbal communicationWritten communication

Languages:English

Tech Stack:IOSAndroidKotlinSwiftTypeScriptJavaScriptAI-assisted developmentClaude CodeCodexBug BountyARM assembly

Eligibility

Work Authorization:Sponsorship available.

Company Brief

OKX

Global cryptocurrency exchange and Web3 technology provider offering spot and derivatives trading, custody, wallet services, and blockchain infrastructure to retail and institutional users worldwide.

Industry: Trading Platforms

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Victoria, Seychelles

Founded: 2017

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

OKX