Staff Engineer, Security Platform Development

About the role

As a Staff Engineer you will own the design and delivery of OKX's security engineering and DevSecOps platform, creating SDKs and agents that embed protection throughout the software lifecycle. You will work across the stack, from code and build pipelines to runtime, and drive adoption of security controls in fast‑moving product teams.

Key responsibilities

• Architect and build an end‑to‑end DevSecOps platform, including SDKs/agents for code, build artifacts, container images, deployment and runtime protection.
• Lead runtime application security (RASP) using Java bytecode instrumentation with ASM, ByteBuddy and the Instrumentation API, continuously tuning for performance and compatibility.
• Integrate and productise scanning capabilities (SAST, DAST, IAST, SCA, image scanning) and embed tools such as SonarQube and Coverity into CI/CD pipelines.
• Design detection, remediation and hardening for common web, API and micro‑service vulnerabilities (XSS, SQL injection, SSRF, deserialization, command execution, auth flaws).
• Apply LLMs and AI agents to automate vulnerability analysis, rule generation, false‑positive reduction and remediation guidance.
• Act as the security technical expert within engineering teams, defining standards, release gates and risk tiering to raise the overall security baseline.

Required profile

• Strong computer‑science fundamentals with deep knowledge of operating systems, networking, compilers, JVM internals and distributed systems.
• Expert‑level Java development experience, including JVM, ClassLoader, Java Agent, ASM, ByteBuddy and performance profiling.
• Hands‑on experience with Python or Go and production‑grade RASP, SAST, DAST, IAST, SCA, and image security solutions.
• Demonstrated offensive and defensive security expertise, understanding exploitation paths and mitigation strategies for web, API and micro‑service vulnerabilities.
• Proficiency with LLMs and AI agents, including model limitations, tool‑calling and evaluation methods.

Required skills

• Java (JVM, ClassLoader, Java Agent)
• ASM, ByteBuddy, bytecode instrumentation
• Python
• Go
• RASP
• SAST, DAST, IAST, SCA
• SonarQube, Coverity
• LLMs and AI agents

What we offer

• Competitive total compensation package
• L&D programs and education subsidies
• Team‑building events and wellness/meal allowances
• Comprehensive healthcare for employees and dependents