• Bachelors degree in Computer Science, Technology, Networking, MIS, Engineering, Mathematics, related technical and logical disciplines, or self-taught enthusiasts
• Solid basic knowledge of security attack and defense, understanding common vulnerability principles and attack techniques, familiar with the best practices and common solutions of the defense side
• Wholistic risk assessment skills to break down complex infrastructural and procedural issues to its basic principles for effective and controllable solutions
• Compliance first mindset. Ability to lead by example for internal and external stakeholders. Highlight organizational best practices and embrace our We Before Me principle
• Analytical with a positive problem-solving mindset, a proactive team player who embodies a growth mindset, flexible, and comfortable in navigating ambiguity with a global mindset

Desirable

• The Supernova Program is a 3-year Career Accelerator Program that aims to fast-track, high performing graduates into technical experts and future leaders mainly in the fields of Product Engineering, Product Management, and Product Design. We firmly believe in the power of the new era. Join us to achieve your narrative around crypto
• As a graduate Security Engineer, you will put in your utmost efforts to secure the OKX platform with millions of daily active users
• You will work cross-functionally with design, product, and other engineering teams to identify and assess security risks, design and develop advanced security protective mechanisms and products or deliver high-quality thorough security operations and reinforcements
• This is an opportunity to learn the full security life cycle of crypto and Web3 platforms and work along with a top-class security team fighting against worldwide security threats
• Designing, developing, and maintaining high-performance backend systems and procedures to support the requirements of client security projects, regulatory, compliance, and infrastructure security best practices
• Conducting security audits and vulnerability assessments, vulnerability scanning, and code reviews
• Conducting routine checks and tests to ensure that all known vulnerabilities are detected and patched
• Maintaining high-quality technical and organizational documentation. Upholding technology best practices and code reviews with peers. Improving efficiency in cross-office/time zone collaboration
• Collaborate with team members and functional stakeholders to meet control requirements to demonstrate organizational security compliance
• Communicate and bridge the gap between external regulatory, audit requirements and internal stakeholder operations
• Providing help and consulting to developers on secure coding practices
• Optional directions include but are not limited to web security, network security, host and terminal security, data security, threat intelligence, SoC/SIEM/SOAR, Client Security, DevSecOps, etc., respecting personal interests and development intentions

• Early in the application process, we will be collecting your specialization preference(s). This will be taken into consideration during the interview process to align your skills and interests, where possible. We encourage you to remain open to different parts of the platform. This is particularly beneficial towards your self-development in overall architecture in the long term