Staff Security Platform Engineer (DevSecOps)

OKX; United States; On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive total compensation package

L&D programs and Education subsidy for

Team building programs and company

Job summary

OKX is seeking a Staff Engineer to own the build-out of security engineering and DevSecOps capabilities, embedding protection into how code is written, built, shipped, and run.

You will architect and implement end-to-end platform components, runtime protection, and scanning integrations, while applying AI-native approaches and collaborating across engineering to raise the security baseline and delivery quality.

Qualifications

• Deep understanding of operating systems, networking, compilers and the JVM, distributed systems, application security, cloud-native security, and supply chain security.

Responsibilities

• Architect and build end-to-end DevSecOps platform with SDKs/Agents.
• Lead runtime protection using RASP and Java Agent, including bytecode instrumentation.
• Integrate scanning across SAST, DAST, IAST, SCA, and image scanning within CI/CD.
• Design detection, remediation, hardening, and counter-measures for web/API/microservices vulnerabilities.
• Apply LLMs and AI Agents to vulnerability analysis, remediation guidance, and automation.
• Embed security as a technical expert inside engineering teams, driving standards and gates.
• Partner with engineering, architecture, SRE, QA, and business on priority security projects.

Skills

Expert-level Java

JVM internals

Python or Go

Security fundamentals

RASP/ SAST/ DAST/ IAST

Security product design

Performance tuning

Security ownership

Tools

ASM

ByteBuddy

Instrumentation

Job description

OKX is seeking a Staff Engineer to own the build-out of security engineering and DevSecOps capabilities, embedding protection into how code is written, built, shipped, and run.

You will architect and implement end-to-end platform components, runtime protection, and scanning integrations, while applying AI-native approaches and collaborating across engineering to raise the security baseline and delivery quality.