Staff Engineer, Security Platform Development

United States Digital Space LLC; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

United States Digital Space LLC is seeking a Staff Engineer to own the security engineering and DevSecOps capabilities, designing and developing security products, platform services, and SDKs/Agents that embed protection into how code is written, built, shipped, and run.

This role requires real depth in security, broad stack coverage, and the engineering muscle to ship, with an emphasis on driving adoption in fast-moving business environments rather than policy documents.

Qualifications

• Staff Engineer with deep security engineering experience across the stack.
• Ability to ship security capabilities into fast-moving environments.

Responsibilities

• Architect and build end-to-end DevSecOps platform with the SDKs/Agents behind our security products.
• Lead runtime protection through RASP and Java Agent with instrumentation.
• Integrate scanning capabilities across SAST, DAST, IAST, SCA, code scanning, and image scanning.
• Embed tools into CI/CD and ensure remediation and re-test.

Skills

DevSecOps

Code security

Runtime protection

Security architecture

Application security

Tools

ASM

ByteBuddy

Instrumentation

SonarQube

Coverity

Job description

Who We Are

At the company, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.

the company is a leading crypto exchange, and the developer of the company Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). the company is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.

Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. the company is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products the company, the company Wallet, OKLink and more.

About the Opportunity

As a Staff Engineer, you'll own the build-out of our security engineering and DevSecOps capabilities: designing and developing the security products, platform services, and SDKs/Agents that embed protection directly into how code is written, built, shipped, and run.

This is a role for someone with real depth in security, broad coverage across the stack, and the engineering muscle to ship. Just as important is the ability to drive adoption — security that lands in complex, fast-moving business environments rather than sitting in a policy document.

What You’ll Be Doing

• Architect and build our end-to-end DevSecOps platform and the SDKs/Agents behind our security products, covering code, build, artifacts, images, deployment, and runtime.
• Lead runtime protection through RASP and Java Agent — bytecode instrumentation, runtime hooking, and detection/interception engines using ASM, ByteBuddy, and Instrumentation, with continuous tuning for performance, stability, and compatibility.
• Integrate and productise scanning capabilities across SAST, DAST, IAST, SCA, code scanning, and image scanning. You'll embed tools like SonarQube and Coverity deep into CI/CD and close the loop from detection through blocking, remediation, and re-test.
• Go deep on application security offence and defence — designing detection, remediation, hardening, and counter-measures for XSS, SQL injection, SSRF, deserialisation, command execution, authentication/authorisation flaws, and API security.