Senior Security Platform Engineer: DevSecOps Leader

OKX; Hong Kong; On-site; HKD 1,413,000 - 2,198,000; Full time

Benefits offered by this job

L&D programs

Wellness and meal allowances

Comprehensive healthcare schemes

More that we love to tell you alongthe

Job summary

OKX is seeking a Senior/Staff Engineer to lead the development of the company’s security platform and DevSecOps capabilities. The role focuses on platform engineering, SDK/Agent development, and security governance across teams. Expect hands-on coding and architectural influence across security products.

Ideal candidates will excel in Java, JVM internals, and security tool integration, with strong ownership and cross-functional collaboration for scalable product capabilities.

Qualifications

• Strong fundamentals in computer science and security.
• Expert-level Java proficiency, JVM internals, and Java Agent development.
• Hands-on experience with RASP, SAST, DAST, IAST, SCA, and image security.

Responsibilities

• Lead architecture and development of end-to-end DevSecOps platform and security products.
• Design and develop RASP/Java Agent runtime protection with instrumentation.
• Integrate CI/CD with code/security scanning tools (SonarQube, Coverity).
• Drive security protection across web, API, and microservice environments.
• Explore AI-native security engineering using LLMs and AI agents.
• Collaborate with engineering teams to govern security standards and remediation workflows.

Skills

Java proficiency

JVM internals

Python or Golang

DevSecOps

Security product development

Tools

ASM

ByteBuddy

Java Instrumentation

SonarQube

Coverity

CI/CD tooling

Job description

OKX is seeking a Senior/Staff Engineer to lead the development of the company’s security platform and DevSecOps capabilities. The role focuses on platform engineering, SDK/Agent development, and security governance across teams. Expect hands-on coding and architectural influence across security products.

Ideal candidates will excel in Java, JVM internals, and security tool integration, with strong ownership and cross-functional collaboration for scalable product capabilities.