(Senior) Engineer, Security

OKX • Full-time • Hong Kong, Hong Kong SAR • 1w ago

Who We Are

At OKX, we believe our future is reshaped with technology. Founded in 2017, OKX is one of the world’s leading cryptocurrency spot and derivatives exchanges. OKX innovatively adopted blockchain technology to reshape the financial ecosystem by offering some of the most diverse and sophisticated products, solutions, and trading tools on the market. Trusted by more than 20 million users in over 180 regions globally, OKX strives to provide an engaging platform that empowers every individual to explore the world of crypto. In addition to its world-class DeFi exchange, OKX serves its users with OKX Insights, a research arm that is at the cutting edge of the latest trends in the cryptocurrency industry. With its extensive range of crypto products and services, and unwavering commitment to innovation, OKX vision is a world of financial access backed by blockchain and the power of decentralized finance.

We invest in our people as much as we invest in technology. We are united by our engaging culture, here we win as a team, embrace changes, and do the right thing. We are committed to creating a friendly, rewarding and diverse environment for OKers. It doesn’t matter where you come from, here everyone feels valued, respected and has the same opportunities to develop and thrive — we want to bring out the best in you.

About the Opportunity

What You’ll Be Doing

Performing and supporting cyber incident response operations.
Conduct security alert monitoring in IDS / EDR / SIEM / Cloud environment.
Conduct malware analysis exercises.
Assist with digital forensics and incident response by liaising with external consultants and remediate the findings.
Keep updated on knowledge of the IT security industry: including awareness of new or revised security solutions, security standards, trends / best practices, offensive techniques and tools
To conduct security awareness training
Develop and maintain IT security policy and standards.
Assist in establishing infrastructure review processes on network and infrastructure operation.
Assist support for deployment and promotion of security products.

What We Look For In You:

Degree holder in Computer Science or Masters in Information Systems / Technology
Solid Information Security experience in the Financial industry / Tech company / Solution Service provider / SOC environment
Familiar with EDR solution / SIEM integration / IDS system / Cloud / Sandbox / Log Analysis / PCAP Analysis / Reverse Engineering / binary analysis and exploitation
Familiar with mainstream security product / tools such as: Nessus, AWVS, Appscan, Burp, webInspect, kali, Wireshark, IDA, Hopper Disassembler, Cuckoo/CAPE, REMnux, etc.
Hands on knowledge of static analysis of suspicious programs , performing behavioral analysis of malicious executables, performing dynamic code analysis of malicious, unpacking malicious software, analyzing Malicious Documents and Scripts
Experience in cybersecurity operations to include Vulnerability Management, Incident Response.
Familiar with cyber security compliance.
Fluency in Chinese and English.

Perks & Benefits