Staff Software Engineer, Mobile Security

<div class="ace-line ace-line old-record-id-doxus3bYvV5DS6icDHnquWbEcNb">OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.</div> <div class="ace-line ace-line old-record-id-doxussQumjJyp0pDHcFh7Y3bH0b">&nbsp;</div> <h2 class="heading-2 ace-line old-record-id-doxusl2cgB8vs7Q3ent4HKPgocd"><strong>Who We Are</strong></h2> <div data-page-id="Kpucdjv7JoAcSZxSf7PuRl5Yscb" data-lark-html-role="root" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-Cfb8dvi9voxFkWxhNcmuJX50sZb"> <p>At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.</p> <p>OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.</p> <p>Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.</p> <p>OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.</p> </div> <div class="ace-line ace-line old-record-id-Cfb8dvi9voxFkWxhNcmuJX50sZb">&nbsp;</div> </div> <div data-page-id="OvVyd3xPZo5hNhxbppju7P8isgg" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-CzjQdI1IWofbWMxmIahu6dAMsjc"> <div data-page-id="Q5McdBHqRos9a1xglGGuWZx7sgc" data-docx-has-block-data="false"> <h2 class="heading-2 ace-line old-record-id-doxusl2cgB8vs7Q3ent4HKPgocd"><strong>About The Opportunity</strong></h2> <div class="ace-line ace-line old-record-id-doxusdoP7NU01oX9Z29HojysCiF"> <div data-zone-id="0" data-line-index="0"> <p>We are looking for a Staff Mobile Security Engineer to join our Mobile Security team, where you will play a key role in identifying and mitigating security vulnerabilities across OKX's mobile applications and platforms. This is a high-ownership role at the intersection of offensive security, mobile engineering, and platform protection — you will work closely with development, operations, and compliance teams to ensure security is embedded at every layer of our mobile stack.</p> <p>You bring deep expertise in mobile application security, offensive techniques, and secure coding practices. You are also fluent in AI-assisted development and bring the discipline to build, maintain, and continuously improve your own AI engineering workflows.</p> </div> </div> <div class="ace-line ace-line old-record-id-doxusJZ5t4Jnk2dRFRKdHIJXMmb">&nbsp;</div> <h2 class="heading-2 ace-line old-record-id-doxusl2cgB8vs7Q3ent4HKPgocd"><strong>What You'll Be Doing</strong></h2> <div data-page-id="R1MMdOP7Jor8rJxZjvEuEmM9s6b" data-docx-has-block-data="false"> <div data-page-id="EJEWdyXsfojXT9xHKfDuSPpSswb" data-docx-has-block-data="false"> <div data-page-id="IwA0dvhKMo2zqdxUm6sux6uxsbb" data-lark-html-role="root" data-docx-has-block-data="false"> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-Lawfdsko6oZQdQxizyqutN4Ls6f" data-list="bullet"> <div>Identify and address security vulnerabilities in mobile code, systems, and networks through manual review, automated tooling, and threat modelling.</div> </li> <li>Manage and optimise application security tools, processes, and alerts to maintain a strong security posture.</li> <li>Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams.</li> <li>Produce detailed security findings reports and present them to both technical and management audiences, contributing to real-world attack prevention.</li> <li>Collaborate with development teams to implement and champion secure coding practices across iOS and Android platforms.</li> <li>Apply AI tools to accelerate security research, automate vulnerability detection workflows, and improve the efficiency of threat analysis.</li> <li>Work alongside operations and compliance teams to ensure security is a consistent priority across the organisation.</li> <li>Participate in incident response and management activities.</li> <li>Stay current on the latest offensive security techniques, application security threats, and industry best practices.</li> </ul> <p>&nbsp;</p> </div> </div> </div> <h2 class="heading-2 ace-line old-record-id-doxusJHbXag5ngXLLiXggj1zhBg"><strong>What We Look For In You</strong></h2> <div data-page-id="R1MMdOP7Jor8rJxZjvEuEmM9s6b" data-docx-has-block-data="false"> <div data-page-id="EJEWdyXsfojXT9xHKfDuSPpSswb" data-docx-has-block-data="false"> <div data-page-id="IwA0dvhKMo2zqdxUm6sux6uxsbb" data-lark-html-role="root" data-docx-has-block-data="false"> <ul class="list-bullet1"> <li>5+ years of experience in mobile application security or offensive security, with hands-on expertise in iOS and/or Android platforms.</li> <li>In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications.</li> <li>Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats.</li> <li>Able to create proof-of-concepts (PoCs) to demonstrate vulnerabilities, review patch code for adherence to standards, and collaborate with repository owners on remediation.</li> <li>Actively uses AI tools in your security engineering workflow — including building AI-leveraged workflows and codifying repeatable agent skills so tools like Claude Code or Codex deliver reliably on real production work.</li> <li>Strong analytical and problem-solving abilities with excellent verbal and written communication skills.</li> </ul> <p>&nbsp;</p> </div> </div> </div> <h2 class="heading-2 ace-line old-record-id-doxusKUjfoqh7QZ5RVAXhjX7gig"><strong>Nice-To-Haves</strong></h2> <div data-page-id="EJEWdyXsfojXT9xHKfDuSPpSswb" data-docx-has-block-data="false"> <div data-page-id="IwA0dvhKMo2zqdxUm6sux6uxsbb" data-lark-html-role="root" data-docx-has-block-data="false"> <div data-page-id="IwA0dvhKMo2zqdxUm6sux6uxsbb" data-lark-html-role="root" data-docx-has-block-data="false"> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-U5bfdzzYRoDOB4xXi1KusWRLsch" data-list="bullet">Prior experience developing mobile security SDKs at scale — products with a daily active user base of over ten million.</li> <li>Experience in large-scale business risk control projects, or practical experience in threat intelligence, business risk prevention, and countermeasures against black and grey industries.</li> <li>In-depth reverse engineering of major apps from first-tier vendors, or other projects that demonstrate strong reverse engineering capabilities.</li> <li>Proficiency in ARM assembly, with the ability to implement deep-level countermeasures at the native and application layers.</li> <li>Experience with device fingerprint recognition — including simulating new devices through methods such as flashing, modification, and application cloning.</li> <li>Ability to work across multiple mobile platforms simultaneously.</li> </ul> <p>&nbsp;</p> </div> </div> </div> </div> </div> <div class="ace-line ace-line old-record-id-Avh0dL0UvoHyoFxymwmuPqtAsWe"> <h2 class="heading-2 ace-line old-record-id-doxusxvzyTH4iZpRPTygm6sKzcf"><strong>Perks &amp; Benefits</strong></h2> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-doxus9Bu8Z2VOqDK5F51723OA8g" data-list="bullet"> <div>Competitive total compensation package</div> </li> <li class="ace-line ace-line old-record-id-doxusB7tdGuv2SmCPjgmCN3Jb1c" data-list="bullet"> <div>L&amp;D programs and Education subsidy for employees' growth and development</div> </li> <li class="ace-line ace-line old-record-id-doxusZTvzFyB7VKd89mBtiKL9ob" data-list="bullet"> <div>Various team building programs and company events</div> </li> <li class="ace-line ace-line old-record-id-doxus4VLa66AV1kBqr1XQp7CFec" data-list="bullet"> <div>Wellness and meal allowances</div> </li> <li class="ace-line ace-line old-record-id-doxusktLuOm7fBzEDlSg6b719qf" data-list="bullet"> <div>Comprehensive healthcare schemes for employees and dependants</div> </li> <li class="ace-line ace-line old-record-id-doxusXaQ6LYBcrJKsuq40ykOyNr" data-list="bullet"> <div>More that we love to tell you along the process!</div> </li> </ul> </div> </div><div class="content-conclusion"><div data-lark-html-role="root"><span class="text-only" data-eleid="18"><span class="text-only"><span class="text-only" data-eleid="6">Notice:<br></span></span></span> <div data-lark-html-role="root"><span class="text-only" data-eleid="26"><span class="text-only">All official </span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only"> vacancies are published on this website.</span></span> <span class="text-only" data-eleid="28"><span class="text-only">While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. </span></span><strong><span class="text-only" data-eleid="29"><span class="text-only">If in doubt, please apply directly through our official careers website.</span></span></strong></div> </div> <div data-lark-html-role="root"><span class="text-only" data-eleid="18"><span class="text-only">Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to&nbsp;</span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only">'s </span></span><a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link" href="https://www.okx.com/en-eu/help/okx-candidate-privacy-notice" target="_blank" data-eleid="19" data-lark-is-custom="true" data-lark-link="true">Candidate Privacy Notice</a><span class="text-only" data-eleid="20"><span class="text-only">.</span></span></div></div>