Staff Software Engineer (Mobile Security)

TL;DR

Staff Software Engineer (Mobile Security): Identifying and mitigating security vulnerabilities across mobile applications and platforms with an accent on offensive security and platform protection. Focus on implementing secure coding practices for iOS and Android, managing bug bounty triage, and automating vulnerability detection using AI-leveraged workflows.

Location: Must have current right to work in Hong Kong (onsite)

Company

OKX is a leading crypto exchange and developer of the OKX Wallet, providing global access to crypto trading and decentralized applications.

What you will do

• Identify and address security vulnerabilities in mobile code, systems, and networks through manual review and threat modelling.
• Manage application security tools and triage Bug Bounty submissions to coordinate remediation.
• Collaborate with development teams to champion secure coding practices across iOS and Android platforms.
• Apply AI tools to accelerate security research and automate vulnerability detection workflows.
• Produce detailed security finding reports for both technical and management audiences.
• Participate in incident response and management activities.

Requirements

• 5+ years of experience in mobile application or offensive security (iOS and/or Android).
• Proficient in code review for Kotlin, Swift, TypeScript, or JavaScript.
• Ability to create proof-of-concepts (PoCs) to demonstrate vulnerabilities and review patch code.
• Experience building AI-leveraged workflows and codifying repeatable agent skills for production work.
• Current right to work in Hong Kong is required; sponsorship is not provided.

Nice to have

• Experience developing mobile security SDKs for products with 10M+ daily active users.
• Expertise in reverse engineering of major apps from first-tier vendors.
• Proficiency in ARM assembly and implementing native-layer countermeasures.
• Experience with device fingerprint recognition and simulating new devices.

Culture & Benefits

• Competitive total compensation package.
• L&D programs and education subsidies for professional growth.
• Comprehensive healthcare schemes for employees and dependants.
• Wellness and meal allowances.
• Various team building programs and company events.