Senior Application Security Engineer

Remotedxb; Abu Dhabi; On-site; AED 140,000 - 230,000; Full time

Benefits offered by this job

Growth fund for professional dev

Team-building events

Global collaboration

Career advancement

Job summary

Bybit, a leading cryptocurrency exchange, is seeking a security auditor to conduct manual code security audits across Java, Go, JS, and C++. You will track global security developments, reproduce vulnerabilities, and identify risks in architecture and processes.

You will help drive SDL implementations, contribute to risk governance, and work with a diverse international team on security initiatives and vulnerability disclosures.

Qualifications

• 3+ years of audit or development experience in Java or Go.
• Experience with Security Development Lifecycle (SDL) implementation.
• Proficient in OWASP Top 10 and common vulnerability exploitation techniques.
• Expert-level proficiency in Java and/or Go tech stacks.
• Familiarity with frameworks like SpringMVC, SSM, Gin, or GoZero.

Responsibilities

• Conduct manual code security audits on business code including Java, Golang, JS, and C++.
• Track domestic and international security developments and reproduce latest vulnerabilities.
• Identify security risks in business architecture, processes, and logic.
• Drive security solution implementation and risk governance.

Skills

Java

Go

Security auditing

OWASP Top 10

Penetration testing

AI tools

Tools

SpringMVC

SSM

Gin

GoZero

Job description

Responsibilities

• Conduct manual code security audits on business code including Java, Golang, JS, and C++


• Track domestic and international security developments and reproduce latest vulnerabilities


• Identify security risks in business architecture, processes, and logic


• Drive security solution implementation and risk governance

Requirements

• 3+ years of audit or development experience in Java or Go


• Experience with Security Development Lifecycle (SDL) implementation


• Proficient in OWASP Top 10 and common vulnerability exploitation techniques


• Expert-level proficiency in Java and/or Go tech stacks


• Familiarity with frameworks like SpringMVC, SSM, Gin, or GoZero


• Solid understanding of penetration testing methods


• Ability to use AI tools to enhance security efficiency

Preferred Qualifications

• Experience with TEE (Trusted Execution Environment) and data protection architectures


• History of submitting high-quality vulnerabilities to SRC or bug bounty platforms


• Experience discovering CVE or CNVD general vulnerabilities

Benefits

• Study Growth Fund for professional development


• Regular internal team-building events and workshopsGlobal collaboration with a diverse international team


• Opportunities for career advancement and internal mobility

About the Company

Bybit is a leading cryptocurrency exchange and digital financial platform serving over 80 million users worldwide, providing a seamless ecosystem across trading, payments, and Web3.