Staff Software Engineer, Mobile Security

OKX
Hong Kong
Workplace: OnsiteFull timeFunction: Software EngineeringExperience: 5+ yearsSkills: ["Analytical","Problem-solving","Verbal communication","Written communication"]

Own mobile application security across OKX’s iOS and Android stack by identifying and mitigating vulnerabilities through threat modeling, manual review, and automated tooling. Manage security tools, triage Bug Bounty reports, and drive remediation with engineering teams while producing clear security findings for both technical and management audiences. Apply AI-assisted workflows to accelerate research and automate detection, and actively participate in incident response to keep security a consistent priority.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
OKX
OKX
1 month ago

Staff Software Engineer, Mobile Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 21 hours agoStatus: Live

Job Summary

Own mobile application security across OKX’s iOS and Android stack by identifying and mitigating vulnerabilities through threat modeling, manual review, and automated tooling. Manage security tools, triage Bug Bounty reports, and drive remediation with engineering teams while producing clear security findings for both technical and management audiences. Apply AI-assisted workflows to accelerate research and automate detection, and actively participate in incident response to keep security a consistent priority.
Location: Hong Kong
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Identify and address security vulnerabilities in mobile code, systems, and networks via manual review, automated tooling, and threat modeling.
  • •Manage and optimize application security tools, processes, and alerts to maintain a strong security posture.
  • •Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams.
  • •Produce security findings reports and present them to technical and management audiences to prevent real-world attacks.
  • •Collaborate with development teams to champion secure coding practices across iOS and Android and participate in incident response.

Pay and Benefits

Perks:Health InsuranceMeal AllowanceLearning Budget

Key Requirements

  • •5+ years of experience in mobile application security or offensive security with hands-on expertise in iOS and/or Android.
  • •In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications.
  • •Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats.
  • •Ability to create proof-of-concepts (PoCs), review patch code against standards, and collaborate with repository owners on remediation.
  • •Actively uses AI tools in security engineering workflows (e.g., building AI-leveraged workflows/agents reliably for production work).
Experience:5+ yearsMobile applicationsOffensive securityApplication securityBug bounty
Skills:AnalyticalProblem-solvingVerbal communicationWritten communication
Languages:English
Tech Stack:IOSAndroidKotlinSwiftTypeScriptJavaScriptAI-assisted developmentClaude CodeCodexBug BountyARM assembly

Eligibility

Work Authorization:Sponsorship available.

Company Brief

OKX
Global cryptocurrency exchange and Web3 technology provider offering spot and derivatives trading, custody, wallet services, and blockchain infrastructure to retail and institutional users worldwide.
Industry: Trading Platforms
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Victoria, Seychelles
Founded: 2017
WebsiteLinkedIn