---
title: 'Senior/Staff Engineer, Security Platform Development at OKX'
canonical: 'https://feeny.ai/job/senior-staff-engineer-security-platform-development-okx-hong-kong-8bzyaxjtyksh'
type: 'job'
last_seen: '2026-09-11'
---

# Senior/Staff Engineer, Security Platform Development at OKX

- **Company:** OKX
- **Location:** Hong Kong, Hong Kong SAR / Singapore, Singapore
- **Posted:** 2026-07-06
- **Last confirmed live:** 2026-09-11
- **Apply:** https://job-boards.greenhouse.io/okx/jobs/7795714003

## Job description

OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.

## Who We Are

At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.

OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.

Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.

OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.

## About The Opportunity

As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, and SDK/Agent development. The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams.

## What You’ll Be Doing

- Lead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents, covering code, build, artifacts, images, deployment, and runtime security.

- Own the design and development of RASP / Java Agent runtime protection, leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility.

- Build and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQube and Coverity to form a closed loop of scanning, gating, remediation, and re-validation.

- Drive core application security protection and offensive/defensive capabilities across scenarios such as XSS, SQL injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security.

- Advance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications.

- Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption.

- Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms.

## What We Look For In You

- Strong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/JVM internals, distributed systems, application security, cloud-native security, and software supply chain security, with both breadth and depth in security technologies.

- Expert-level Java proficiency, especially in JVM internals, ClassLoader, Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning; proficient in Python or Golang as well.

- Proven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning, with the ability to independently design, integrate, and productionize security capabilities.

- Strong offensive and defensive security experience, with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments.

- Strong practical experience with LLMs and AI Agents, plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities.

- Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability.

- Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes.

## Preferred Qualifications

- Background from top-tier Internet companies, cloud providers, or leading cybersecurity vendors;

- Experience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms;

- Strong experience in security product development, SDK/Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response;

- Hands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems.

## Perks & Benefits

- Competitive total compensation package

- L&D programs and education subsidy for employees' growth and development

- Various team building programs and company events

- Wellness and meal allowances
- Comprehensive healthcare schemes for employees and dependants
- More that we love to tell you along the process!

Notice:

All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.

Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's [Candidate Privacy Notice](https://www.okx.com/en-eu/help/okx-candidate-privacy-notice).

## About OKX

## Company Overview
- **One-liner**: OKX is a world-leading digital asset exchange and Web3 platform offering spot and derivatives trading, a self-custody wallet, and decentralized application access to over 100 million users globally.
- **Entity Type**: Private (venture-backed; last round $200M in March 2026)
- **Headquarters**: Seychelles (legal entity: Aux Cayes FinTech Co. Ltd.)
- **Founded**: 2017
- **Founders**: Star Xu

## Core Business
- **Primary industry**: Cryptocurrency exchange, digital asset trading, Web3 infrastructure.
- **Target customers**: B2C (retail traders, crypto enthusiasts) and B2B (institutions, high-frequency traders, liquidity providers). Serves both individuals and large institutions.
- **Mission**: To reshape the world with crypto, contributing to every individual’s freedom, and to build a fairer, more transparent, and accessible society through blockchain technology.

## Products & Services
- **Spot Trading**: Buy and sell over 300 cryptocurrencies with low fees.
- **Derivatives**: Futures, options, and perpetual swaps for advanced trading strategies.
- **Structured Products**: Yield-bearing products for passive income.
- **OKX Wallet**: Self-custody Web3 wallet supporting dApps, DeFi, NFTs, and cross-chain swaps.
- **OKX Pay**: Fiat on-ramp and payment infrastructure for seamless deposits.
- **Institutional Services**: Ultra-low latency API connectivity, prime brokerage, and tailored liquidity solutions.
- **Proof of Reserves**: Monthly public attestation of asset backing (1:1).

## Market Standing
- **Valuation**: Not publicly disclosed.
- **Key Metrics**: Over 100 million customers worldwide; 2,886 employees (as of mid-2026, +14.3% YoY); $200M total funding (venture round, March 2026).
- **Notable Investors/Partners**: One undisclosed investor in the latest round. Partnerships include McLaren F1, Manchester City FC, Tribeca Film Festival.
- **Growth Signals**: Expanded into Australia, Brazil, Netherlands, Singapore, and Turkey in the last year; plans to enter US, Belgium, and UAE. Active job postings: 246. Employee headcount grew 14.3% YoY.

## Competitive Advantages
- **Liquidity & Low Fees**: One of the top crypto exchanges by trading volume with competitive fee structures.
- **Transparency**: Monthly proof-of-reserves reports publicly verifiable.
- **Security**: Multi-layer security, GSLB, distributed server clusters, and dedicated security engineering teams.
- **Global Reach**: Available in over 180 countries/regions with localized support.
- **Web3 Integration**: Deeply connected wallet bridging centralized and decentralized finance.

## Strategic Focus
- **AI-Native Product & Engineering**: Investing heavily in AI agents, chatbots, and infrastructure for automated trading and user experience.
- **Institutional Growth**: Expanding VIP relationship management, prime brokerage, and institutional-grade tools.
- **Global Regulatory Compliance**: Obtaining licenses in new jurisdictions (e.g., Singapore, Turkey, Brazil) while maintaining a robust compliance center.
- **Web3 Ecosystem**: Growing the OKX Wallet and dApp connectivity to drive DeFi adoption.

## Why Work Here
- **Culture**: Values-driven environment with core principles: "WE before Me", "Do the right thing", and "Get things done". Emphasis on ownership, transparency, and innovation.
- **Work Policy**: Hybrid/office roles across multiple global hubs (Singapore, Hong Kong, San Jose, Dubai, etc.). Remote flexibility varies by role.
- **Perks**: Competitive benefits including learning budgets, team events, and the "Supernova Program" for early-career talent. Engineering teams work on cutting-edge blockchain and AI problems.
- **Engineering Culture**: Strong focus on AI-native development, Rust/Java/Go, mobile infrastructure, and security. High percentage of technical roles (721 engineers, 10% of workforce).
- **Growth Opportunity**: Rapidly scaling company with global expansion, offering cross-functional mobility and exposure to senior leadership.

## Sources
1. [okx.com - About & Careers](https://www.okx.com/en-us/join-us)
2. [LinkedIn - OKX Company Page](https://www.linkedin.com/company/okxofficial/jobs)
3. [Greenhouse - OKX Job Board](https://job-boards.greenhouse.io/okx)
4. [okx.com - Main Site](https://www.okx.com/)

## Other roles at OKX

- [Design System Designer, OKDS](https://feeny.ai/job/design-system-designer-okds-okx-hong-kong-209g89j53nz5) — Hong Kong, Hong Kong SAR
- [Senior Product Designer, Core](https://feeny.ai/job/senior-product-designer-core-okx-hong-kong-be0e5n3n05rj) — Hong Kong, Hong Kong SAR
- [Senior Product Designer, Global Exchange](https://feeny.ai/job/senior-product-designer-global-exchange-okx-hong-kong-z9y1x0052esq) — Hong Kong, Hong Kong SAR
- [Tax Reporting Senior Manager](https://feeny.ai/job/tax-reporting-senior-manager-okx-hong-kong-5mm2tx5eprhc) — Hong Kong, Hong Kong SAR
- [Quantitative Trader (D1 Liquidity)](https://feeny.ai/job/quantitative-trader-d1-liquidity-okx-hong-kong-7y0vrzjp38rj) — Hong Kong, Hong Kong SAR
- [Senior Product Compliance Manager](https://feeny.ai/job/senior-product-compliance-manager-okx-hong-kong-a01vgp0dzq0f) — Hong Kong, Hong Kong SAR / Singapore, Singapore
- [Senior Compliance Manager - Global FCC Investigations](https://feeny.ai/job/senior-compliance-manager-global-fcc-investigations-okx-emea-pf2cq2wxtdfw) — EMEA
- [IT Support Engineer](https://feeny.ai/job/it-support-engineer-okx-kuala-lumpur-2h7xhytep5zw) — Kuala Lumpur, Malaysia
- [Tech Governance - Security Compliance & Governance Engineer (Mandarin Bilingual Required)](https://feeny.ai/job/tech-governance-security-compliance-governance-engineer-mandarin-bilingual-rsqz1m78fpdt) — San Jose California, United States
- [Principal / Senior Product Manager, Asset (Tax Reporting, Client Statements & Portfolio)](https://feeny.ai/job/principal-senior-product-manager-asset-tax-reporting-client-statements-4x4sdqk3tdwe) — Hong Kong, Hong Kong SAR