Staff Software Engineer, Mobile Security

About OKX

OKX is a prominent cryptocurrency exchange and the creator of the OKX Wallet, which provides millions of users with access to crypto trading and decentralized applications. Trusted by a range of large institutions for secure crypto market access, OKX operates globally with a commitment to safety, reliability, and transparency upheld by its Proof of Reserves. The company culture is driven by core values such as collective success, integrity, and action-oriented execution, aiming to foster a diverse, rewarding workplace environment.

Role Overview

This position is for a Staff Mobile Security Engineer tasked with safeguarding OKX’s mobile platforms by identifying and mitigating security vulnerabilities. The role combines offensive security expertise with mobile and platform engineering to embed security into every component of OKX's mobile applications. Collaboration with development, operations, and compliance teams is essential to maintain a strong security posture.

Key Responsibilities

• Detect and resolve vulnerabilities in mobile code, systems, and network layers through manual analysis, automated tools, and threat modeling.
• Manage and enhance application security tools and workflows to ensure robust security standards.
• Review and address Bug Bounty submissions by triaging issues and coordinating fixes with engineering teams.
• Prepare comprehensive security reports and communicate findings effectively to various stakeholders, aiding in attack prevention.
• Work with developers to promote secure coding across iOS and Android platforms.
• Leverage AI technologies to speed up security research, automate vulnerability detection, and refine threat assessment processes.
• Partner with operations and compliance teams to integrate security as a key enterprise priority.
• Participate actively in incident management and response protocols.
• Stay informed on emerging offensive security tactics, application threats, and industry best practices.

Candidate Profile

• Minimum of 5 years' experience in mobile application or offensive security, particularly on iOS and/or Android.
• Thorough knowledge of security challenges and vulnerabilities affecting mobile and web apps.
• Skilled in code review using Kotlin, Swift, TypeScript, or JavaScript with strong understanding of app security issues.
• Capable of developing proof-of-concept exploits, evaluating security patches, and collaborating with code repository owners on remediation.
• Experienced in applying AI tools within security engineering workflows, including building reliable AI-driven automation and codified agent abilities.
• Excellent analytical thinking and communication skills, both verbal and written.

Preferred Qualifications

• Experience creating mobile security SDKs used daily by over ten million users.
• Background in managing extensive business risk projects or experience with threat intelligence and mitigating black/grey market risks.
• Expertise in reverse engineering notable applications from leading providers.
• Proficient in ARM assembly with ability to implement deep native and app layer countermeasures.
• Familiarity with device fingerprinting and simulating devices via flashing, modification, or cloning.
• Ability to manage security concerns across multiple mobile platforms simultaneously.

Benefits

• Attractive total compensation package
• Learning and development programs plus educational subsidies for employee growth
• Team-building initiatives and company events
• Wellness programs alongside meal allowances
• Comprehensive healthcare coverage for employees and their dependents
• Additional benefits shared during the recruitment process

Additional Information

Priority will be given to applicants who currently have the right to work in Singapore and do not require visa sponsorship from OKX. Official job postings are listed solely on the company's website to ensure accuracy. Applicants' personal data will be handled in accordance with OKX's Candidate Privacy Notice.