{"id":94930,"url":"https://alion.io/job/okx-staff-engineer-security-platform-development","title":"Staff Engineer, Security Platform Development","company":{"id":76,"name":"OKX","domain":"okx.com","url":"https://alion.io/company/okx","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":311,"ghost_share":0.113,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":84,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hong Kong","Singapore"],"countries":["HK","SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":260000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2198},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Assembly","optional":false},{"name":"CI/CD","optional":false},{"name":"Context Engineering","optional":false},{"name":"Function Calling","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"SQL","optional":false},{"name":"Tool Use","optional":false},{"name":"Recommender Systems","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-08-04T05:25:56Z","employer_posted_date":"2026-08-07","last_verified_at":"2026-10-16T20:01:59Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":72},"description":"Who We Are\nAt OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.\nOKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.\nAcross our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.\nAbout the Opportunity\nAs a Staff Engineer, you'll own the build-out of our security engineering and DevSecOps capabilities: designing and developing the security products, platform services, and SDKs/Agents that embed protection directly into how code is written, built, shipped, and run.\nThis is a role for someone with real depth in security, broad coverage across the stack, and the engineering muscle to ship. Just as important is the ability to drive adoption - security that lands in complex, fast-moving business environments rather than sitting in a policy document.\nWhat You’ll Be Doing\nArchitect and build our end-to-end DevSecOps platform and the SDKs/Agents behind our security products, covering code, build, artifacts, images, deployment, and runtime.\n\nLead runtime protection through RASP and Java Agent - bytecode instrumentation, runtime hooking, and detection/interception engines using ASM, ByteBuddy, and Instrumentation, with continuous tuning for performance, stability, and compatibility.\n\nIntegrate and productise scanning capabilities across SAST, DAST, IAST, SCA, code scanning, and image scanning. You'll embed tools like SonarQube and Coverity deep into CI/CD and close the loop from detection through blocking, remediation, and re-test.\n\nGo deep on application security offence and defence - designing detection, remediation, hardening, and counter-measures for XSS, SQL injection, SSRF, deserialisation, command execution, authentication/authorisation flaws, and API security.\nBring AI-native security engineering to life. Apply LLMs and AI Agents to vulnerability analysis, rule generation, false-positive attribution, remediation guidance, security knowledge capture, and engineering automation - and build a coherent view of the architecture, mechanics, and security implications.\nEmbed as the security technical expert inside engineering teams, driving security standards, onboarding specifications, release gates, risk tiering, and remediation mechanisms that measurably lift the security baseline and delivery quality.\nPartner across engineering, architecture, SRE, QA, and business teams on priority projects, solving the genuinely hard security problems and turning the solutions into reusable platform capability and repeatable practice.\nWhat We Look For In You \nStrong computer science and security fundamentals - deep understanding of operating systems, networking, compilers and the JVM, distributed systems, application security, cloud-native security, and supply chain security. Both breadth and depth.\n\nExpert-level Java, with hands-on depth in the JVM, ClassLoader, Java Agent, ASM, ByteBuddy, bytecode instrumentation, and performance profiling and tuning. Plus working proficiency in Python or Go.\n\nSubstantial production experience with RASP, SAST, DAST, IAST, SCA, image security, and code scanning - enough to design a capability, integrate the engine, build the platform around it, and take it to scale independently.\n\nReal offensive and defensive experience. You understand the root causes, exploitation paths, detection logic, bypass techniques, and fixes for common web, API, and microservices vulnerabilities - and can design from both the attacker's and defender's point of view.\n\nFluency with LLMs and AI Agents, including a considered view on model capability limits, agent architecture, tool calling, context engineering, evaluation methods, and how AI is reshaping both security engineering and the attack surface.\n\nStrong engineering execution paired with product instinct - able to lead the design and delivery of security products, platform modules, and SDKs/Agents while balancing security outcomes against performance overhead, integration cost, and long-term operability.\nExceptional ownership, cross-team communication, and the persistence to move security governance, rule enforcement, and remediation through to a clear result.\nNice to Haves\nSecurity engineering experience at a top-tier internet company, cloud provider, or leading security vendor\n\nYou've led the build of a DevSecOps platform, application security platform, RASP, code scanning platform, or cloud-native security platform\n\nBackground in security product development, SDK/Agent engineering, vulnerability research, red team exercises, or purple team work\nShipped AI + Security work - security copilots, intelligent rule generation, automated analysis, or remediation recommendation systems\nPerks &Benefits\nCompetitive total compensation package\n\nL&D programs and Education subsidy for employees' growth and development\n\nVarious team building programs and company events\n\nWellness and meal allowances \n\nComprehensive healthcare schemes for employees and dependants\n\nMore that we love to tell you along the process!\n\nNotice:\nAll official OKXvacancies are published on this website.While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.\nInformation collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.","description_format":"text","description_chars":6045,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Company events"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Cryptocurrencies","Crypto Exchanges","Crypto Wallets"],"lifecycle":[{"event":"open","at":"2026-08-04T05:25:56Z"}],"visa":[],"liveness":{"score":48,"band":"ok","label":"Likely open","p_open":1,"p_active":0.806,"p_room":0.6,"age_days":73,"expected_fill_days":84,"reasons":["conf:3","velocity","win:late","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/okx-staff-engineer-security-platform-development","json_url":"https://alion.io/job/okx-staff-engineer-security-platform-development.json","meta":{"generated_at":"2026-10-16T23:37:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5635,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":76},"rest":"https://alion.io/mcp/rest/get_company?id=76"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fokx-staff-engineer-security-platform-development"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fokx-staff-engineer-security-platform-development"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fokx-staff-engineer-security-platform-development"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/okx-staff-engineer-security-platform-development\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fokx-staff-engineer-security-platform-development"}]}