DevSecOps Security Expert - Java/Go

Job Description

OKX is seeking a DevSecOps Security Expert to join their team in Hong Kong. The ideal candidate will be responsible for developing and maintaining the DevSecOps DAST scanning engine, writing and optimizing DAST scanning rules, and continuously iterating the DAST engine to improve scanning efficiency and detection rate. They will also be responsible for designing, developing, and maintaining the backend systems of the DevSecOps security team.

Responsibilities:

• Developing and maintaining the DevSecOps DAST scanning engine.
• Writing and optimizing DAST scanning rules.
• Iterating the DAST engine.
• Designing, developing, and maintaining backend systems.

Requirements:

• At least 5 years of experience in DevSecOps or related field.
• Familiarity with DAST principles and practical application.
• Solid Golang and/or Java development skills.
• Proficiency in DAST engine tools (AWVS, Xray, Burp Suite, etc.).
• Ability to analyze and handle false positives and false negatives.
• Familiarity with web application vulnerabilities and repair measures.
• Familiarity with DevSecOps processes and CI/CD pipelines.
• Strong problem analysis and technical writing skills.
• Good communication and teamwork skills.

OKX offers:

• Competitive total compensation package
• L&D programs and education subsidy
• Team building programs and company events
• Wellness and meal allowance
• Comprehensive healthcare schemes