Who We Are
At OKX, we believe that the future will be reshaped by Crypto, ultimately contributing to every individual's freedom. OKX began as a crypto exchange giving millions of people access to crypto trading and over time becoming among the largest platforms in the world. In recent years, we have developed one of the most connected Web3 wallets used by millions to access decentralized crypto applications (dApps). OKX is a trusted brand by hundreds of large institutions seeking access to crypto markets on a reliable platform that seamlessly connects with global banking and payments. In the last year, OKX has expanded into new markets including Australia, Brazil, Netherlands, Singapore and Turkey, with plans to launch in the US, Belgium and the UAE.
We are deeply committed to shaping a fairer, more transparent and accessible society through blockchain technology. This is why we publish proof of reserves monthly, and continue to ship new innovative security features.
About the Opportunity
As a Security Engineer, you will put in your utmost efforts to secure the OKX platform with millions of daily active users. You will work cross-functionally with design, product, and other engineering teams to identify and assess security risks, design and develop advanced security protective mechanisms and products or deliver high-quality thorough security operations and reinforcements. This is an opportunity to learn the full security life cycle of crypto and Web3 platforms and work along with a top-class security team fighting against worldwide security threats. We are open to hire in either Ireland or Malta!
What You’ll Be Doing
-
The construction and continuous optimization of infrastructure security capabilities, including intrusion technology research, intrusion behavior analysis and feature extraction, development/validation/iteration of detection rules and processes, and development of security infrastructures.
-
Designing, developing, and maintaining high-performance backend systems to support the requirements of client security projects.
-
Providing help and guidance to developers on secure coding practices.
-
Conducting security testing and vulnerability assessments, including penetration testing, vulnerability scanning, and code reviews.
-
Conducting routine checks and tests to ensure that all known vulnerabilities are detected and patched.
-
Maintaining high-quality technical documentation. Upholding technology best practices and code reviews with peers. Improving efficiency in cross-office/time zone collaboration.
-
Contribute to building out and optimizing data loss prevention programs.
-
Contribute to policy creation, organizational audits and changes within the organization.
-
Conducting incident response, incident remediation and other related fixes.
-
Optional directions include but are not limited to web security, network security, host and terminal security, data security, threat intelligence, SoC/SIEM/SOAR, Client Security, DevSecOps, etc., respecting personal interests and development intentions.
What We Look For In You
-
Be eager to learn and grow into the role and function.
-
Bachelors in Computer Science, Technology, Cyber Security, Engineering, Mathematics, related technical disciplines, or self-taught enthusiasts.
-
3 to 5 years of experience being a member of a Security team focused on detection and response operations.
-
Solid basic knowledge of security attack and defense, understanding common vulnerability principles and attack techniques, familiar with the best practices and common solutions of the defense side.
-
Experienced with IP/TCP stack, network routing protocols, and wireless protocols; understanding of network concepts and their application to cyber security best practices.
-
Experience with secure coding, SIEM, or DLP technologies.
-
Possessing relevant tech stack skillset and knowledge for the respective specialization - Java/Python/Go, relational databases, data structures and algorithms, OS, and network computers.
-
Analytical with a positive problem-solving mindset, a proactive team player who embodies a growth mindset, flexible, and comfortable in navigating ambiguity with a global mindset.
-
Experience with incident response and remediation.
Nice to Haves
-
Comfortable with the cloud-based Linux environment. Knowledgeable in multi-threading and distributed architecture. Understanding of mainstream messaging frameworks, including Kafka. Or familiar with daily developing tools such as NPM, gulp, webpack, git.
-
Experience in penetration tests, intrusion detection capability development, and maintenance, security emergency response, and other related work.
-
Experience in CTF competitions and achieving good results.
-
Experience in freelance projects, hacking competitions. Bug bounties, and related cyber security projects or competitions.
-
Having participated in trainings or certifications.
-
Interested in equipping themselves to be full-stack architects and open to rotate amongst specializations. Curious and excited about the crypto/blockchain industry.
-
Ability to prioritize risks to the business in real-time
-
Excellent analytical and problem-solving skills with attention to detail
-
Able to speak Mandarin fluently
Perks & Benefits
-
Competitive total compensation package
-
L&D programs and Education subsidy for employees' growth and development
-
Various team building programs and company events
-
Wellness and meal allowances
-
Comprehensive healthcare schemes for employees and dependents
