Senior App Security Engineer — SDL, Go/Java, OWASP

Remotedxb; Abu Dhabi; On-site; AED 140,000 - 230,000; Full time

Benefits offered by this job

Growth fund for professional dev

Team-building events

Global collaboration

Career advancement

Job summary

Bybit, a leading cryptocurrency exchange, is seeking a security auditor to conduct manual code security audits across Java, Go, JS, and C++. You will track global security developments, reproduce vulnerabilities, and identify risks in architecture and processes.

You will help drive SDL implementations, contribute to risk governance, and work with a diverse international team on security initiatives and vulnerability disclosures.

Qualifications

• 3+ years of audit or development experience in Java or Go.
• Experience with Security Development Lifecycle (SDL) implementation.
• Proficient in OWASP Top 10 and common vulnerability exploitation techniques.
• Expert-level proficiency in Java and/or Go tech stacks.
• Familiarity with frameworks like SpringMVC, SSM, Gin, or GoZero.

Responsibilities

• Conduct manual code security audits on business code including Java, Golang, JS, and C++.
• Track domestic and international security developments and reproduce latest vulnerabilities.
• Identify security risks in business architecture, processes, and logic.
• Drive security solution implementation and risk governance.

Skills

Java

Go

Security auditing

OWASP Top 10

Penetration testing

AI tools

Tools

SpringMVC

SSM

Gin

GoZero

Job description

Bybit, a leading cryptocurrency exchange, is seeking a security auditor to conduct manual code security audits across Java, Go, JS, and C++. You will track global security developments, reproduce vulnerabilities, and identify risks in architecture and processes.

You will help drive SDL implementations, contribute to risk governance, and work with a diverse international team on security initiatives and vulnerability disclosures.