OKX · Hong Kong, Hong Kong SAR
Staff Software Engineer, Mobile Security
识别并修复移动应用安全风险,推动安全工程及AI辅助安全工作流。
最近核查時仍有刊登最近確認刊登:2026-11-03 18:33:26.403299+00
招聘狀態可能變動,申請前請查看原始職位。
薪酬未公開
學歷未说明
語言未說明
經驗5年以上移动应用安全或攻防安全经验,具备iOS和/或Android实操专长
來源發布日期:2026-07-06T05:16:35-04:00
工作內容
- 通过代码审查、自动化工具和威胁建模发现并处理移动端安全漏洞。
- 管理应用安全工具、流程和警报,并协调漏洞赏金问题的处置。
- 推动iOS和Android安全编码,与运营及合规团队协作并参与事件响应。
- 运用AI工具加速安全研究、漏洞检测和威胁分析。
職位要求
- 具备5年以上移动应用安全或攻防安全经验,熟悉iOS和/或Android。
- 理解移动及Web应用安全风险,能审查Kotlin、Swift、TypeScript或JavaScript代码。
- 能够编写漏洞概念验证、审查修复代码并协作推动漏洞修复。
- 能在安全工程工作流中使用AI工具,构建可重复的AI辅助工作流。
原文資格條件
以下摘錄自招聘來源,適用條件請以原文為準。
- OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX's sponsorship of a visa.
查看招聘來源的要求摘錄
原始資料於 2026-11-01 查閱;內容可能已更新,請查看原始職位。
What We Look For In You 5+ years of experience in mobile application security or offensive security, with hands-on expertise in iOS and/or Android platforms. In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications. Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats. Able to create proof-of-concepts (PoCs) to demonstrate vulnerabilities, review patch code for adherence to standards, and collaborate with repository owners on remediation. Actively uses AI tools in your security engineering workflow — including building AI-leveraged workflows and codifying repeatable agent skills so tools like Claude Code or Codex deliver reliably on real production work. Strong analytical and problem-solving abilities with excellent verbal and written communication skills. Nice-To-Haves Prior experience developing mobile security SDKs at scale — products with a daily active user base of over ten million. Experience in large-scale business risk control projects, or practical experience in threat intelligence, business risk prevention, and countermeasures against black and grey industries. In-depth reverse engineering of major apps from first-tier vendors, or other projects that demonstrate strong reverse engineering capabilities. Proficiency in ARM assembly, with the ability to implement deep-level countermeasures at the native and application layers. Experience with device fingerprint recognition — including simulating new devices through methods such as flashing, modification, and application cloning. Ability to work across multiple mobile platforms simultaneously. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! #LI-ML1 #LI-ONSITE Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice. OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX's sponsorship of a visa.
來源:公司官网 · 資料查閱日期 2026-11-01。職位狀態及要求請以原始招聘頁面為準。