2 months ago
Singapore, SingaporeStaff+
Responsibilities
- Identify and remediate mobile code, system, and network vulnerabilities through manual review, automated tooling, and threat modeling.
- Manage and optimize application security tools, processes, and alerts.
- Validate and respond to bug bounty submissions, triage findings, and coordinate remediation with engineering teams.
- Produce security findings reports and present them to technical and management audiences.
- Champion secure coding practices across iOS and Android platforms.
- Use AI tools to accelerate security research, automate vulnerability detection, and improve threat analysis workflows.
- Collaborate with development, operations, and compliance teams on security priorities.
- Participate in incident response and management activities.
- Stay current with offensive security techniques, application security threats, and industry best practices.
Requirements
- 5+ years of experience in mobile application security or offensive security with hands-on expertise in iOS and/or Android.
- Deep understanding of security risks, vulnerabilities, and concepts in mobile and web applications.
- Proficiency reviewing Kotlin, Swift, TypeScript, or JavaScript code with strong knowledge of application security threats.
- Ability to create vulnerability proof-of-concepts, review patches against security standards, and coordinate remediation with repository owners.
- Active use of AI tools in security engineering workflows, including building AI-assisted workflows and codifying repeatable agent skills for production work.
- Strong analytical, problem-solving, verbal communication, and written communication skills.
- Preferred: experience developing mobile security SDKs for products with more than ten million daily active users.
- Preferred: experience with large-scale business risk control, threat intelligence, business risk prevention, or countermeasures against black and grey industries.
- Preferred: deep reverse engineering of major applications or comparable reverse engineering projects.
- Preferred: ARM assembly proficiency and ability to implement native- and application-layer countermeasures.
- Preferred: device fingerprint recognition experience, including flashing, modification, and application cloning.
- Preferred: ability to work across multiple mobile platforms simultaneously.
- Applicants should have the current right to work in Singapore without requiring visa sponsorship from OKX.
Benefits
- Competitive total compensation package.
- Learning and development programs and an education subsidy.
- Team-building programs and company events.
- Wellness and meal allowances.
- Comprehensive healthcare schemes for employees and dependants.
Tech Stack
Categories
About OKX
OKX builds a global cryptocurrency exchange and Web3 wallet used by retail and institutional traders for spot, derivatives, and DeFi access, with developer APIs. Its business model centers on trading and financing fees, plus wallet and on-chain services. Founded in 2017 and privately held, OKX publishes monthly proof-of-reserves and operates as part of the OKG group serving crypto markets worldwide.