{"id":603607,"url":"https://alion.io/job/bybit-security-senior-application-security-engineer","title":"[Security] Senior Application Security Engineer","company":{"id":47455,"name":"Bybit","domain":"bybit.com","url":"https://alion.io/company/bybit","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":21,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":44000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SDL","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-07-30T06:15:01Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-16T10:42:40Z","board_verified":true,"closed_at":null,"days_open":78,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":78},"description":"About Us\nEstablished in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 - connecting users to the future of digital finance.\nOur core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.\nToday, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.\nJob Summary:\nPrimarily responsible for security auditing and security governance of the company's platform systems. Identify potential risks in business requirements and technical implementation plans, provide solutions, and drive their implementation.\nJob Responsibilities:\nConduct manual code security audits on business code (Java, Golang, JS, C++, etc.) and write audit reports.\n\nTrack domestic and international security developments; analyze and reproduce the latest security vulnerabilities.\n\nDeeply understand and master the company's product business; identify security risks in business architecture, business processes, and business logic; provide corresponding security solutions and drive their implementation.\n\nDrive security solution implementation, risk governance, etc.\n\nJob Requirements:\nAssociate degree or above; requirements may be relaxed for candidates with strong capabilities.\n\nAt least 3+ years of business development or audit experience based on Java or Go; has led or participated in SDL (Security Development Lifecycle) implementation.\n\nProficient in the underlying principles, discovery methods, vulnerable code scenarios, and exploitation techniques of common security vulnerabilities (not limited to OWASP Top 10).\n\nExpert-level proficiency in Java and/or Go tech stacks; understands language-specific characteristics and common mainstream development frameworks, with relevant code audit experience.\n\nFamiliar with common white-box audit methodologies, with the ability to track and reproduce the latest vulnerabilities.\n\nFamiliar with mainstream development frameworks such as SpringMVC, SSM, or Gin, GoZero, etc.\n\nHas a solid understanding of penetration testing; proficient in common penetration testing methods and familiar with the principles and exploitation techniques of common vulnerabilities.\n\nAble to proficiently use AI tools to enhance security work efficiency.\n\nHighly proactive with strong logical thinking; possesses good communication, coordination, organizational skills, and documentation writing ability.\n\nExperience with TEE (Trusted Execution Environment) and other security encryption, data protection technical architectures and solution implementation is preferred.\n\nNice to Have:\nHas submitted high-quality vulnerabilities to domestic or international SRC/bug bounty platforms.\n\nHas discovered CVE or CNVD general vulnerabilities.\n\nHas Java or Go code audit experience with demonstrated results.\n\nWhy Join Us\nAt Bybit, we are committed to fostering a supportive and enriching work environment. \nOur benefits include:\n- Study Growth Fund: We support your professional development and continuous learning.\n- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.\n- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.\n- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.\n- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.","description_format":"text","description_chars":4357,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"associate","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cryptocurrencies","Crypto Exchanges"],"lifecycle":[{"event":"open","at":"2026-09-10T17:51:37Z"}],"visa":[],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.782,"p_room":0.44,"age_days":77,"expected_fill_days":53,"reasons":["conf:3","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/bybit-security-senior-application-security-engineer","json_url":"https://alion.io/job/bybit-security-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-16T12:30:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11760,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47455},"rest":"https://alion.io/mcp/rest/get_company?id=47455"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbybit-security-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbybit-security-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbybit-security-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bybit-security-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbybit-security-senior-application-security-engineer"}]}