{"id":3697378,"url":"https://alion.io/job/bitget-security-research-engineer-anquanyanfagongchengshi","title":"Security Research Engineer 安全研发工程师","company":{"id":516,"name":"Bitget","domain":"bitget.com","url":"https://alion.io/company/bitget","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Moka","truth_index":{"grade":"A","score":93,"open_postings":33,"ghost_share":0,"stale_share":0.091,"repost_share":0,"time_to_fill_p50_days":73,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"eBPF","optional":false},{"name":"Gradle","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Maven","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Netty","optional":false},{"name":"Rust","optional":false},{"name":"Service Mesh","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true}],"status":"live","first_seen_at":"2026-11-03T18:28:52Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-06T06:09:33Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About us\nBitget is the world's largest Universal Exchange (UEX), serving over 125 million users and offering access to over 2M crypto tokens, 100+ tokenized stocks, ETFs, commodities, FX, and precious metals such as gold. The ecosystem is committed to helping users trade smarter with its AI agent, which co-pilots trade execution.\nBitget is driving crypto adoption through strategic partnerships with LALIGA and MotoGP™. Aligned with its global impact strategy, Bitget has joined hands with UNICEF to support blockchain education for 1.1 million people by 2027. Bitget currently leads in the tokenized TradFi market, providing the industry's lowest fees and highest liquidity across 150 regions worldwide.\nWhat you'll do\nResponsible for the design and development of the core components of the zero-trust system, including identity authentication, access proxy, policy engine, etc.;\nResponsible for the architecture design and development of security gateways and security middleware, implementing authentication, rate limiting, protection and auditing capabilities at the traffic layer;\nParticipated in the research and iteration of RASP products, implementing runtime attack detection and blocking (such as deserialization, JNDI injection, command execution, memory horse, etc.) based on Java Agent and bytecode enhancement technology;\nEnsured the high availability and low intrusion of security components in the production environment, continuously optimizing performance overhead, compatibility and fault fallback capabilities;\nFollowed up on new attack methods and vulnerabilities in the Java ecosystem, converting them into detection rules and protection capabilities;\nParticipated in technical solution reviews, promoting the integration and implementation of security capabilities in business systems;\nActively used AI tools to improve development efficiency, participated in the construction of team AI engineeringization, including internal MCP services, Skill specifications and the implementation of Agent in the R&D process, and paid attention to the security risks introduced by the introduction of AI applications.\nWhat you'll need\nBachelor's degree or above, major in cybersecurity, information security, computer science, etc.; 5 years of Java development experience, with at least 2 years of experience in the research and development of security products or security infrastructure;\nHave in-depth research and development experience in at least two of the following areas: zero trust, security gateway, security middleware, RASP; Familiar with protocols and mechanisms such as mTLS, OAuth2/OIDC, JWT;\nFamiliar with the principles and exploitation chains of common Java vulnerabilities, including deserialization, JNDI injection, expression injection, SSRF, memory carriages, etc.;\nHave design and development experience for high-concurrency and high-availability systems, familiar with Netty, NIO and asynchronous programming models, and have practical experiences in circuit breakers, gray release, capacity assessment, etc. for stability assurance;\nProficient in using tools such as JFR, async-profiler, Arthas for performance analysis, and have experience in troubleshooting online issues;\nHave a deep understanding of JVM principles, including class loading mechanism, bytecode structure, JIT, memory model and GC tuning; Familiar with Java Agent/Instrumentation, and proficient in using at least one of ASM, ByteBuddy, Javassist;\nUnderstand the principles of Maven/Gradle build, familiar with dependency conflict handling, shade/relocate, class isolation, etc.;\nProficient in using AI programming tools such as Claude Code, Cursor to assist in development, have practical experience with Agent, Skill, MCP; Have experience in promoting team AI efficiency improvement, or be familiar with AI security risks such as Prompt injection, MCP permission control, etc.;\nThose with the following experiences are preferred: have experience in multiple language development, such as Go/Rust language development, Kubernetes / Service Mesh, eBPF / JVMTI, WAF / IAST / API security product development, as well as contributions to security open-source projects, CVE or security conference topics.\n岗位职责：\n负责零信任体系核心组件的设计与研发，包括身份认证、访问代理、策略引擎等模块; \n负责安全网关及安全中间件的架构设计与开发，在流量层实现鉴权、限流、防护与审计能力; \n参与 RASP 产品研发与迭代，基于 Java Agent 及字节码增强技术实现运行时攻击检测与阻断（如反序列化、JNDI 注入、命令执行、内存马等）; \n保障安全组件在生产环境中的高可用与低侵入，持续优化性能开销、兼容性及故障降级能力; \n跟踪 Java 生态的新型攻击手法与漏洞，将其转化为检测规则与防护能力; \n参与技术方案评审，推动安全能力在业务系统中的接入与落地; \n积极运用 AI 工具提升研发效率，参与团队 AI 工程化建设，包括内部 MCP 服务、Skill 规范及 Agent 在研发流程中的落地，并关注 AI 应用引入的安全风险。\n任职要求：\n本科及以上学历，网络安全、信息安全、计算机等相关专业优先; 5 年以上 Java 研发经验，其中 2 年以上安全产品或安全基础设施研发经验; \n在零信任、安全网关、安全中间件、RASP 中至少两个方向有深入研发经验，熟悉 mTLS、OAuth2/OIDC、JWT 等协议与机制; \n熟悉 Java 常见漏洞原理及利用链，包括反序列化、JNDI 注入、表达式注入、SSRF、内存马等; \n具备高并发、高可用系统的设计与研发经验，熟悉 Netty、NIO 及异步编程模型，有熔断降级、灰度发布、容量评估等稳定性保障实践; \n熟练使用 JFR、async-profiler、Arthas 等工具进行性能分析，具备线上问题排查经验; \n深入理解 JVM 原理，包括类加载机制、字节码结构、JIT、内存模型及 GC 调优; 熟悉 Java Agent / Instrumentation，熟练使用 ASM、ByteBuddy、Javassist 中的至少一种; \n理解 Maven / Gradle 构建原理，熟悉依赖冲突处理、shade/relocate、类隔离等问题; \n熟练使用 Claude Code、Cursor 等 AI 编程工具辅助研发，对 Agent、Skill、MCP 有实践经验; 有推动团队 AI 提效经验，或了解 Prompt 注入、MCP 权限控制等 AI 安全风险者优先; \n有以下经验者优先：有多种语言开发经验，如Go/Rust 语言开发、Kubernetes / Service Mesh、eBPF / JVMTI、WAF / IAST / API 安全产品研发，以及安全开源项目贡献、CVE 或安全会议议题。\nWhy Bitget?\nBitget is the world's leading web 3 platform for copy trading and one of the world's largest and most respected exchanges\nWe are a global company with staff members from over 50 different countries and regions\nWe are growing and looking for world-class ambitious talents to help us continue this journey\nWe have a streamlined structure that empowers employees to work efficiently, delivering the best results in a short timeframe\nWe offer competitive salaries and benefits\nBlockchain technology and digital assets have the potential to change finance in a way no other technology can - be part of it!\nIf you are ambitious and believe that digital assets could be the next financial and technological revolution, please apply!\nFor more information regarding candidates' personal data processing, please refer to Bitget Candidate Privacy Notice.","description_format":"text","description_chars":6153,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Blockchain & Crypto","Crypto Exchanges","Crypto Wallets","Forex & CFD Brokers"],"lifecycle":[{"event":"open","at":"2026-11-03T18:28:52Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":2,"expected_fill_days":73,"reasons":["conf:4","urgency","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/bitget-security-research-engineer-anquanyanfagongchengshi","json_url":"https://alion.io/job/bitget-security-research-engineer-anquanyanfagongchengshi.json","meta":{"generated_at":"2026-11-06T08:10:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14664,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":516},"rest":"https://alion.io/mcp/rest/get_company?id=516"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbitget-security-research-engineer-anquanyanfagongchengshi"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbitget-security-research-engineer-anquanyanfagongchengshi"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbitget-security-research-engineer-anquanyanfagongchengshi"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bitget-security-research-engineer-anquanyanfagongchengshi\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbitget-security-research-engineer-anquanyanfagongchengshi"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3697378}},{"tool":"search_jobs","arguments":{"company":"bitget.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3697378},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}