Senior Engineer (Security) - Middleware Platform

Hong Kong
Full time
Office
Compensation is not specified
Role
Security Engineer
Description

Who We Are

At OKX, our focus lies in leveraging technology to shape the future. Established in 2017, we are a prominent cryptocurrency spot and derivatives exchange globally. By harnessing blockchain technology, we redefine the financial landscape by offering a wide array of advanced products, solutions, and trading tools. Trusted by over 20 million users across 180 regions, OKX aims to provide an interactive platform that enables individuals to delve into the realm of cryptocurrencies. Alongside our exceptional DeFi exchange, OKX also offers OKX Insights, a research division on the forefront of cryptocurrency industry trends. With a diverse range of crypto services and a strong commitment to innovation, OKX envisions a financial landscape supported by blockchain and decentralized finance.

We invest in our team members just as much as we invest in technology. Our culture thrives on collaboration, adaptability, and integrity. We are dedicated to fostering a friendly, inclusive, and diverse working environment. At OKX, everyone is valued and respected, regardless of their background, and has equal opportunities for growth and advancement — our aim is to bring out the best in each individual.

About the Opportunity

The middleware team at OKX plays a vital role in fortifying the core infrastructure of the company. They ensure a robust architecture and environment that facilitates safe and reliable coding practices amongst our engineering community. Comprising individuals who are passionate about enhancing the coding environment through technology, the team ultimately benefits our users and customers in the long term.

What You’ll Be Doing:

  • Develop an internal Data Loss Prevention system (DLP) with key features like sensitive data identification, data classification and grading, flow monitoring, outbound interception, and data leakage tracing
  • Develop and maintain the existing Host-based Intrusion Detection System (HIDS)
  • Collaborate with the Security Operations team for timely response to risk events and addressing any issues related to DLP and HIDS systems
  • Keep abreast of the latest technology trends in information security and drive improvements in the team's technical capabilities

What We Look For In You:

  • Hold a Bachelor's degree or higher in computer science, information security, or related fields
  • Knowledgeable in information security, with experience in developing security products and familiarity with tools like DLP, IDS/IPS, EDR, UEBA
  • Proficient in Objective-C, Swift, and knowledgeable in Java (Springboot), Python, or Golang
  • Familiarity with commonly used middleware such as Mysql, Redis, and Kafka
  • Strong teamwork and communication skills

Perks & Benefits

  • Competitive total compensation
  • Comprehensive insurance coverage for employees and their dependants
  • Additional benefits discussed during the recruitment process
Skills Required
Avatar
OKX
Company size
Not specified
Location
United States
Description
Not specified

More Full-time Jobs

Show more

Game Studio Hiring: Full-Stack, Mobile & 3D Web Developers

Part time
Remote
About Us
We are an established game studio developing HeroWarrior, a Unity-based web battle game that has been in active development for three years. Our project is supported by GameWorld (Netherlands) and we're currently preparing for version 2.0 with an expanded development team.
Following strategic restructuring in 2022, we're now building a distributed team across Europe and seeking talented developers to join our long-term project.
Open Positions
We are actively recruiting for the following roles:
UI/UX Designer
Specialization in gaming interface design
Experience with Unity UI systems preferred
 
Full-Stack Developers
 
Backend and frontend development for web platform
Experience with game-related web services preferred
 
Mobile Developers
 
Native mobile app development
Cross-platform experience valued
 
Unity Developers
 
Gameplay mechanics implementation
3+ years Unity experience required
 
3D Web Developers
 
WebGL and Three.js expertise
Browser-based 3D rendering experience
 
hat We Offer
Project Commitment: We're seeking long-term partnerships, not short-term contractors. This is an opportunity to grow with an established project backed by industry partners.
Compensation Structure:
Flexible payment options: hourly rates, monthly retainers, or milestone-based compensation
Rates negotiable based on experience and role
Initial evaluation period followed by standard employment terms
 
Work Environment:
Remote-friendly distributed team
Collaborative development process
Opportunity to work on a commercially-backed game project
Application Requirements
 
Please submit the following:
Portfolio/Resume - Detailed work history and relevant projects
Rate Expectations - Your preferred compensation structure and rates
Code Samples - GitHub repository, portfolio links, or previous work examples
Availability - Expected start date and commitment level
Evaluation Process Acknowledgment - Confirmation of willingness to complete a brief technical assessment
 
Ideal Candidates
Demonstrated passion for game development
Strong technical skills in relevant technologies
Experience working on long-term projects
Collaborative mindset and professional communication
Interest in building innovative gaming experiences
 
Next Steps
We are moving quickly to fill these positions. Qualified candidates will be contacted within one week for initial discussions and technical evaluation.
To apply, please send your complete application materials to vlad@gameworldcompany.com
 
Payment in Crypto
14,400-17,000
Monthly
See details

Web3 Growth Hacker (Enforcer of Expansion)

Full time
Hybrid
Description
About Target Mafia
Target Mafia is a syndicate of elite media buyers, data scientists, and creative capos dominating gambling, crypto, nutra, and adult niches. We operate on pure performance: if our partners win, we win.
We are expanding our crypto empire and need a Web3 Growth Hacker, our Enforcer of Expansion, to scale projects, grow communities, and execute high-ROI campaigns across Web3 ecosystems.
Working at Target Mafia
This is a fast-paced, results-driven role where strategy meets execution. You’ll identify growth opportunities, implement viral campaigns, and optimize channels to maximize performance. Your work will directly impact revenue and user acquisition across multiple projects.
Role
As a Web3 Growth Hacker, you will drive user acquisition, scale communities, and execute growth strategies that expand Target Mafia’s influence in the crypto space. You’ll combine creative tactics, data analysis, and guerrilla marketing to deliver measurable results.
Responsibilities
Plan and execute growth campaigns across Telegram, Discord, Twitter, and other Web3 channels.
Build partnerships and collaborations with crypto communities and influencers.
Track, analyze, and optimize campaigns for maximum ROI.
Identify viral trends and implement them to boost engagement and user acquisition.
Work closely with media buyer dons and creative capos to align growth efforts with marketing strategies.
Skills Required
Growth Hacking & Performance Marketing
Social Media Strategy & Community Building
Crypto & Web3 Knowledge
Influencer & Partnership Management
Data Analysis & Campaign Optimization
Guerrilla Marketing & Viral Campaign Execution
Creativity & Fast Problem Solving
Reasons to Join Our Team
Lead high-impact campaigns in trending Web3 and crypto markets
Work with an elite, performance-driven mafia of media buyers
Performance-based compensation in stablecoins, with bonuses for growth wins
Hands-on experience scaling high-stakes projects
Flexible, dynamic, and rewarding environment for top-tier talent

Assistant in Financial Technology and Trading Strategies (with Training)

Berlin, Germany
Berlin, Germany
Part time
Remote
Description
We are offering an opportunity to join our team and learn about cross-market trading strategies, focusing on identifying price differences of assets across multiple platforms. This role provides hands-on experience in financial technology, data analysis, and trading support.
As part of this position, you will:
Gain practical knowledge of market analysis and trading workflows
Learn how to recognize and evaluate opportunities across different platforms
Develop your skills in risk management and decision-making
Work with a mentor who will guide you step by step through the learning process
What we provide:
Comprehensive training program designed for beginners
Ongoing mentorship and professional support
Flexible schedule (approx. 1 hour a day required for study and practice)
Remote work setup with the possibility to grow into a larger role over time
This is a part-time, entry-level opportunity suitable for candidates with little or no prior experience. What matters most is your willingness to learn and apply new knowledge in practice.
Compensation: Competitive monthly pay structure with opportunities for progression as skills develop
5,000-20,000
Monthly
See details

Head of Custody Security

Dublin, Ireland
Dublin, Ireland
Full time
Hybrid
Responsibilities

Conduct, create, and execute testing of security controls across identity management, key management, and infrastructure (network and cloud) setups.

Assist with client assurance tasks, including addressing Requests for Proposals (RFPs), Requests for Information (RFIs), and Due Diligence Questionnaires (DDQs).

Recognize and assess trends in client inquiries and offer feedback to internal teams for enhancing documentation and control readiness.

Perform security due diligence and continuous monitoring for Web3/blockchain vendors, by evaluating their control maturity, reviewing SOC reports and security documents, and identifying any remaining risks.

Coordinate external audit activities, such as walkthroughs, gathering evidence, and tracking responses.

Pinpoint and study gaps in current and new processes, and then create and monitor remediation suggestions to completion (e.g., onboarding processes).

Develop and sustain knowledge of pertinent financial regulatory security requirements and guarantee control alignment.

Investigate and distribute details on information security best practices, emerging risks, and mitigation approaches with internal teams.

Evaluate and suggest next-generation security tools, automation, and technologies to enhance overall security stance.

Review potential security impacts on the platform resulting from blockchain network or protocol upgrades.

Requirements

Minimum of 8 years of suitable experience in security assurance, audit, compliance, or cloud security engineering.

Demonstrated proficiency in testing and affirming security controls within IAM, key management, and network/cloud environments.

Deep comprehension of Identity and Access Management (IAM) principles.

Familiarity with cryptographic key management, HSMs, and KMS systems.

Strong understanding of cloud and network security architecture and configuration.

Proven track record supporting SOC 1, SOC 2, ISO 27001, PCI DSS, or similar external audits and evaluations.

Exposure to leading cloud platforms (AWS, GCP, Azure) and infrastructure-as-code practices.

Experience in preparing client assurance materials, RFP/RFI/DDQ responses, and evidence documentation.

Knowledge of blockchain platforms or digital asset custody systems is advantageous.

Ability to work autonomously and handle demanding situations effectively.

Outstanding verbal and written communication skills.

Pragmatic and solution-driven mindset, capable of harmonizing security requirements with operational viability and business demands.

Head of Custody Security

London, United Kingdom
London, United Kingdom
Full time
Hybrid
Responsibilities

Conduct, design, and implement testing of security controls encompassing identity management, key management, and infrastructure (network and cloud) configurations.

Assist in client assurance activities, including responding to Requests for Proposals (RFPs), Requests for Information (RFIs), and Due Diligence Questionnaires (DDQs).

Recognize and analyze trends in client inquiries and provide internal teams with feedback to enhance documentation and control preparedness.

Conduct security due diligence and continuous monitoring for Web3/blockchain vendors, assessing their control maturity, reviewing SOC reports and security documentation, and identifying residual risks.

Coordinate external audit efforts, including walkthroughs, evidence collection, and response tracking.

Identify and assess gaps in existing and new processes, develop, and monitor remediation recommendations to completion (e.g., onboarding flow).

Maintain a comprehensive understanding of relevant financial regulatory security requirements and ensure control alignment.

Research and share best practices in information security, emerging threats, and mitigation strategies with internal teams.

Evaluate and suggest next-generation security tools, automation, and technologies to enhance overall security posture.

Assess blockchain network or protocol upgrades for potential security impacts on the platform.

Requirements

Minimum of 8 years of pertinent experience in security assurance, audit, compliance, or cloud security engineering.

Demonstrated proficiency in testing and verifying security controls across IAM, key management, and network/cloud environments.

Strong comprehension of Identity and Access Management (IAM) concepts.

Knowledge of cryptographic key management, HSMs, and KMS systems.

Sound understanding of cloud and network security architecture and configuration.

Proven experience supporting SOC 1, SOC 2, ISO 27001, PCI DSS, or equivalent external audits and evaluations.

Exposure to leading cloud platforms (AWS, GCP, Azure) and infrastructure-as-code.

Experience in preparing client assurance materials, RFP/RFI/DDQ responses, and evidence documentation.

Familiarity with blockchain platforms or digital asset custody systems is beneficial.

Capable of working independently and under pressure.

Excellent verbal and written communication skills.

Pragmatic and solution-focused approach, ability to balance security requirements with operational feasibility and business needs.