Senior Application Security Auditor & SDL Lead

Bybit; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Bybit is seeking a security auditor and governance expert to safeguard its platform systems and drive risk-based solutions. You will identify risks in business requirements and technical plans and lead remediation efforts.

You will conduct manual code security audits across Java, Go, JS, and more, track global security developments, and implement robust risk governance with SDL. Candidates with 3+ years of audit or development experience in Java or Go, strong code-audit background, and knowledge

Qualifications

• Associate degree or above; may be relaxed for strong candidates.
• 3+ years of Java or Go development or audit experience; led or participated in SDL implementation.
• Proficient in vulnerability discovery, OWASP Top 10 and exploitation basics.
• Expert level in Java and/or Go; audit experience with frameworks and code review.
• Familiar with white-box audit methodologies; track and reproduce latest vulnerabilities.
• Familiar with SpringMVC, SSM, Gin, GoZero frameworks.
• Solid understanding of penetration testing and exploitation techniques.
• Able to use AI tools to enhance security work efficiency.
• Strong communication, coordination and documentation skills.
• Experience with TEE and security encryption architectures is preferred.

Responsibilities

• Conduct manual code security audits on Java, Go, JS, C++, etc. and write audit reports.
• Track domestic and international security developments; analyze and reproduce vulnerabilities.
• Understand product business; identify security risks in architecture, processes and logic; provide solutions and drive implementation.
• Drive security solution implementation and risk governance.

Skills

Java

Go

Code auditing

SDL

Education

Associate degree or above

Tools

SpringMVC

SSM

Gin

GoZero

Job description

Bybit is seeking a security auditor and governance expert to safeguard its platform systems and drive risk-based solutions. You will identify risks in business requirements and technical plans and lead remediation efforts.

You will conduct manual code security audits across Java, Go, JS, and more, track global security developments, and implement robust risk governance with SDL. Candidates with 3+ years of audit or development experience in Java or Go, strong code-audit background, and knowledge