Senior Staff/Principal Security Engineering, OKX

• 12+ years of hands-on experience in security engineering, program analysis, or product security roles
• Strong expertise in fuzzing, hybrid fuzzing, symbolic execution, or automated vulnerability discovery
• Proven track record designing and deploying security tools at scale (distributed fuzzing clusters, static analysis platforms, runtime validation frameworks)
• In-depth knowledge of cryptography, secure protocols, data encryption, and key management
• Solid understanding of application security principles (OWASP, STRIDE, TARA) and exploit techniques
• Hands-on experience with cloud (AWS/GCP), container security (Docker/Kubernetes), and large-scale distributed systems
• Proficiency in at least one system-level programming language (Java/C/C++/Rust/Go) and one scripting language (Python/Shell)
• Strong communication and leadership skills, with experience mentoring teams and influencing cross-functional stakeholders

Desirable

• As a Senior Staff Security Engineer, you will be a hands-on technical leader responsible for advancing OKX’s product and infrastructure security
• You’ll design and deploy cutting-edge solutions across fuzzing, program analysis, applied cryptography, and AI-driven security testing
• This role requires strong technical depth, creativity in solving novel security problems, and the ability to influence engineering direction at scale
• This is an opportunity to lead transformative security initiatives in one of the fastest-moving industries while working with a world-class security team
• Lead the design and development of advanced security testing platforms, including large-scale fuzzing frameworks, symbolic execution engines, and AI-powered validation systems
• Drive secure architecture reviews and threat modeling for critical infrastructure, APIs, smart contracts, and cloud-native services
• Champion Secure SDLC practices, embedding advanced static/dynamic analysis into CI/CD pipelines and automating vulnerability discovery
• Research, prototype, and deploy cutting-edge defense mechanisms (e.g., moving target defense, runtime exploit mitigations, advanced key management systems)
• Serve as a subject matter expert on cryptography, data protection, and secure protocols, guiding product and engineering teams
• Perform deep-dive vulnerability research, root cause analysis, and exploitation modeling across diverse platforms (web, mobile, cloud, automotive, blockchain)
• Mentor senior engineers and collaborate across global teams to establish security-by-design culture
• Publish findings, contribute to open-source projects, and represent OKX in external security forums when appropriate