Senior Engineer Infrastructure Security

About OKX:

Founded in 2017, OKX is one of the world’s leading cryptocurrency spot and derivatives exchanges. OKX innovatively adopted blockchain technology to reshape the financial ecosystem by offering some of the most diverse and sophisticated products, solutions, and trading tools on the market. Trusted by more than 20 million users in over 180 regions globally, OKX strives to provide an engaging platform that empowers every individual to explore the world of crypto. In addition to its world-class DeFi exchange, OKX serves its users with OKX Insights, a research arm that is at the cutting edge of the latest trends in the cryptocurrency industry. With its extensive range of crypto products and services, and unwavering commitment to innovation, OKX’s vision is a world of financial access backed by blockchain and the power of decentralized finance.

Responsibilities:

• Develop and optimize OKX infrastructure security capabilities, including intrusion technology research, intrusion behavior analysis and feature extraction, development/validation/iteration of detection rules and processes, and development of security infrastructure
• Job scope including ( but not limit to) web security, network security, host and terminal security, data security, threat intelligence, SoC/SIEM/SOAR, etc. based on candidate's expertise and interest
• Verifying and improving the reliability, coverage, and depth of existing security capabilities through offensive and defensive drills
• Participating in emergency response, disposal, and review of intrusion incidents

Requirements:

• Bachelor's degree or above in computer, information security, communication, and related majors
• At least 1 year of relevant work experience in security defense, security development, etc.
• Solid basic knowledge of security attack and defense, understanding common vulnerability principles and attack techniques, familiar with the best practices and common solutions of the defence side
• Good development ability, able to independently complete detailed development tasks such as data analysis and vulnerability verification, with unlimited development languages

Preferred Qualifications:

• Experience in penetration tests, intrusion detection capability development and maintenance, security emergency response and other related work
• Experience in CTF competitions and achieving good results
• Good learning and communication skills