Senior Staff Engineer Security Platform Development
OKX is a leading global cryptocurrency exchange offering a wide range of trading services, including spot and derivatives trading, as well as Web3 solutions.
Maintainer signals as of 8/14/2026
Investors
Projects
About OKX
OKX is a global cryptocurrency exchange known for its trading services and financial products. The platform offers a wide range of features, including spot and derivatives trading, staking services, and a user-friendly interface suitable for both beginners and experienced traders.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead development of security engineering and DevSecOps capabilities, including security products, platforms, SDKs, and Agents. You will develop Java runtime protection, integrate security scanning into CI/CD, address application vulnerabilities, apply AI to security workflows, and drive security governance across engineering teams.
Requirements
- Computer Science
- Operating systems
- Networking
- Compilers
- JVM internals
- Distributed systems
- Application security
- Cloud-native security
- Software supply-chain security
- Java
- ClassLoader
- Java Agent
- ASM
- ByteBuddy
- Bytecode instrumentation
- Profiling
- Performance tuning
- Python
- Golang
- RASP
- SAST
- DAST
- IAST
- SCA
- Image security
- Code security scanning
- Vulnerability analysis
- Penetration testing
- LLM
- AI Agents
- Security governance
Responsibilities
- Lead architecture and development of the DevSecOps platform and security products
- Develop SDKs and Agents for code, build, artifact, image, deployment, and runtime security
- Design and develop RASP and Java Agent runtime protection
- Implement bytecode enhancement, runtime hooks, and detection and blocking engines
- Integrate security scanning into CI/CD workflows
- Build scanning, gating, remediation, and re-validation processes
- Develop application security protections for web, API, and microservice vulnerabilities
- Apply LLMs and AI Agents to vulnerability analysis and security automation
- Drive security standards, integration rules, quality gates, and remediation workflows
- Collaborate with stakeholders to deliver scalable security capabilities
Benefits
- L&D programs
- Education subsidy
- Team building programs
- Company events
- Wellness allowances
- Meal allowances
- Healthcare schemes for employees and dependants
