Senior Security Platform Engineer: DevSecOps & RASP

OKX; Hong Kong; On-site; HKD 700,000 - 900,000; Full time

Benefits offered by this job

Competitive total compensation package

L&D programs and education subsidy

Various team building programs

Wellness and meal allowances

Comprehensive healthcare schemes

Job summary

OKX is seeking a Technical Expert to lead the development of its core security engineering and DevSecOps solutions in Hong Kong. The ideal candidate will have robust security product development skills and a strong understanding of various security vulnerabilities.

Key responsibilities include leading the architecture of a comprehensive DevSecOps platform, integrating security scanning tools, and collaborating with engineering teams to enhance overall security standards. This role requires proficiency in Java and experience with advanced security technologies.

Qualifications

• Strong fundamentals in computer science with a deep understanding of operating systems and security.
• Expert-level Java proficiency; also proficient in Python or Golang.
• Proven experience with RASP, SAST, DAST, IAST, SCA security capabilities.

Responsibilities

• Lead development of DevSecOps platform and security products.
• Build and integrate security scanning tools into CI/CD workflows.
• Drive application security across various threat scenarios.

Skills

Java proficiency

Python

Golang

Operating systems knowledge

Network security

Application security

RASP expertise

DevSecOps knowledge

AI in security

Tools

SonarQube

Coverity

ASM

ByteBuddy

Job description

OKX is seeking a Technical Expert to lead the development of its core security engineering and DevSecOps solutions in Hong Kong. The ideal candidate will have robust security product development skills and a strong understanding of various security vulnerabilities.

Key responsibilities include leading the architecture of a comprehensive DevSecOps platform, integrating security scanning tools, and collaborating with engineering teams to enhance overall security standards. This role requires proficiency in Java and experience with advanced security technologies.