Staff Engineer Security Platform Development
OKX is a leading global cryptocurrency exchange offering a wide range of trading services, including spot and derivatives trading, as well as Web3 solutions.
Maintainer signals as of 8/14/2026
Investors
Projects
About OKX
OKX is a global cryptocurrency exchange known for its trading services and financial products. The platform offers a wide range of features, including spot and derivatives trading, staking services, and a user-friendly interface suitable for both beginners and experienced traders.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the build-out of security engineering and DevSecOps capabilities by designing security products, platform services, SDKs, and agents that embed protection throughout the software lifecycle. You will lead runtime protection, integrate security scanning, address application vulnerabilities, apply AI to security engineering, and drive security standards and remediation across engineering teams.
Requirements
- Strong computer science and security fundamentals
- Expert-level Java and JVM experience
- Experience with Java Agents, ASM, ByteBuddy, bytecode instrumentation, and performance tuning
- Working proficiency in Python or Go
- Production experience with RASP, SAST, DAST, IAST, SCA, image security, and code scanning
- Offensive and defensive application security experience
- Fluency with LLMs and AI Agents
- Experience designing and delivering security products, platform modules, and SDKs or agents
- Exceptional ownership and cross-team communication
Responsibilities
- Architect and build an end-to-end DevSecOps platform
- Build SDKs and agents for security products
- Lead runtime protection using RASP and Java Agent technologies
- Integrate SAST, DAST, IAST, SCA, code scanning, and image scanning into CI/CD
- Design detection, remediation, hardening, and countermeasures for application and API vulnerabilities
- Apply LLMs and AI Agents to vulnerability analysis and security automation
- Drive security standards, onboarding specifications, release gates, risk tiering, and remediation mechanisms
- Partner across engineering, architecture, SRE, QA, and business teams
Benefits
- L&D programs
- Education subsidy
- Team building programs
- Company events
- Wellness allowances
- Meal allowances
- Comprehensive healthcare schemes for employees and dependants