Staff Engineer - DevSecOps Platform Security

OKX; Hong Kong; On-site; HKD 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Competitive compensation

Education subsidy

Team events

Wellness and meal allowances

Healthcare schemes

Job summary

OKX is seeking a Staff Engineer to own security engineering and DevSecOps capabilities across code, build, and runtime. You will design and ship SDKs/Agents that embed protection into how code is written and executed, and drive adoption in a fast-moving engineering environment.

You will lead runtime protection with RASP and Java Agent, integrate SAST/DAST/IAST/SCA into CI/CD, apply AI-native security, and partner with architecture, SRE, QA, and product teams to lift security standards and

Qualifications

• Strong CS and security fundamentals across OS, networks, JVM, and cloud-native security.
• Expert-level Java with JVM, ASM, ByteBuddy, and performance tuning.
• Production experience with RASP, SAST, DAST, IAST, SCA, image security, and code scanning.
• Offensive and defensive security experience for web, API, and microservices.
• Experience with AI agents and LLMs in security engineering.

Responsibilities

• Architect and build end-to-end DevSecOps platform and SDKs/Agents.
• Lead runtime protection through RASP and Java Agent.
• Integrate scanning across SAST, DAST, IAST, SCA, image scanning into CI/CD.
• Design detection and remediation for common vulnerabilities.
• Apply AI-native security engineering with AI agents and LLMs.
• Embed security expert inside engineering teams and drive governance.

Skills

Java

Python

Go

Security tooling

Tools

ASM

ByteBuddy

Instrumentation

SonarQube

Coverity

Job description

OKX is seeking a Staff Engineer to own security engineering and DevSecOps capabilities across code, build, and runtime. You will design and ship SDKs/Agents that embed protection into how code is written and executed, and drive adoption in a fast-moving engineering environment.

You will lead runtime protection with RASP and Java Agent, integrate SAST/DAST/IAST/SCA into CI/CD, apply AI-native security, and partner with architecture, SRE, QA, and product teams to lift security standards and