{"id":94918,"url":"https://alion.io/job/okx-seniorstaff-engineer-security-platform-development","title":"Senior/Staff Engineer, Security Platform Development","company":{"id":76,"name":"OKX","domain":"okx.com","url":"https://alion.io/company/okx","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":312,"ghost_share":0.112,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":84,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hong Kong","Singapore"],"countries":["HK","SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":257000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2198},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Assembly","optional":false},{"name":"CI/CD","optional":false},{"name":"Context Engineering","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"SQL","optional":false},{"name":"Recommender Systems","optional":true}],"status":"live","first_seen_at":"2026-07-06T08:39:32Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-18T02:43:08Z","board_verified":true,"closed_at":null,"days_open":103,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":102},"description":"OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.\n\nWho We Are\nAt OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.\nOKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. \nAcross our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.\nOKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.\nAbout The Opportunity\nAs a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, andSDK/Agent development. The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams.\nWhat You’ll Be Doing \nLead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents, covering code, build, artifacts, images, deployment, and runtime security.\n\nOwn the design and development of RASP / Java Agent runtime protection, leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility.\n\nBuild and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQubeand Coverity to form a closed loop of scanning, gating, remediation, and re-validation.\n\nDrive core application security protection and offensive/defensive capabilities across scenarios such as XSS,SQLinjection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security.\n\nAdvance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications.\n\nPartner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption.\n\nCollaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms.\n\nWhat We Look For In You \nStrong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/JVMinternals, distributed systems, application security, cloud-native security, and software supply chain security, with both breadth and depth in security technologies.\n\nExpert-level Java proficiency, especially in JVMinternals,ClassLoader, Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning; proficient in Python or Golang as well.\n\nProven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning, with the ability to independently design, integrate, and productionize security capabilities.\n\nStrong offensive and defensive security experience, with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments.\n\nStrong practical experience with LLMs and AI Agents, plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities.\n\nStrong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability.\n\nStrong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes.\n\nPreferred Qualifications\nBackground from top-tier Internet companies, cloud providers, or leading cybersecurity vendors;\n\nExperience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms;\n\nStrong experience in security product development,SDK/Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response;\n\nHands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems.\n\nPerks & Benefits \nCompetitive total compensation package\n\nL&D programs and education subsidy for employees' growth and development\nVarious team building programs and company events\n\nWellness and meal allowances\nComprehensive healthcare schemes for employees and dependants\nMore that we love to tell you along the process!\nNotice:\nAll official OKXvacancies are published on this website.While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.\nInformation collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.","description_format":"text","description_chars":6187,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Company events"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Cryptocurrencies","Crypto Exchanges","Crypto Wallets"],"lifecycle":[{"event":"open","at":"2026-07-06T08:39:32Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.732,"p_room":0.44,"age_days":102,"expected_fill_days":84,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/okx-seniorstaff-engineer-security-platform-development","json_url":"https://alion.io/job/okx-seniorstaff-engineer-security-platform-development.json","meta":{"generated_at":"2026-10-18T04:50:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7283,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":76},"rest":"https://alion.io/mcp/rest/get_company?id=76"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fokx-seniorstaff-engineer-security-platform-development"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fokx-seniorstaff-engineer-security-platform-development"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fokx-seniorstaff-engineer-security-platform-development"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/okx-seniorstaff-engineer-security-platform-development\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fokx-seniorstaff-engineer-security-platform-development"}]}