Graduate Hire 2024/25 - SRE/Security Engineer

2 Days ago • All levels

About the job

Summary_{By Outscal}

Join OKX's Supernova Program as a Graduate SRE/Security Engineer and secure the platform serving millions of daily active users. Responsibilities include building tools for automation, designing backend systems, and conducting security assessments. Ideal candidates possess a strong foundation in security principles and programming languages like Java/Python/Go.

OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX's sponsorship of a visa.

If you are interested in more than one Supernova role, please apply to your first preference. We will still consider you for all opportunities.

Who We Are

At OKX, we believe that the future will be reshaped by Crypto, ultimately contributing to every individual's freedom. OKX began as a crypto exchange giving millions of people access to crypto trading and over time becoming among the largest platforms in the world. In recent years, we have developed one of the most connected Web3 wallets used by millions to access decentralized crypto applications (dApps). OKX is a trusted brand by hundreds of large institutions seeking access to crypto markets on a reliable platform that seamlessly connects with global banking and payments. In the last year, OKX has expanded into new markets including Australia, Brazil, Netherlands, Singapore and Turkey, with plans to launch in the US, Belgium and the UAE. We are deeply committed to shaping a fairer, more transparent and accessible society through blockchain technology. This is why we publish proof of reserves monthly, and continue to ship new innovative security features.

About OKX Graduate Program (Supernova)

The Supernova Program is a 3-year Career Accelerator Program that aims to fast-track young, high performing graduates into technical experts and future leaders mainly in the fields of Product Engineering, Product Management, and Product Design. We firmly believe in the youthful power of the new era. Join us to achieve your narrative around crypto.

As a graduate Engineer, you will put in your utmost efforts to secure the OKX platform with millions of daily active users. You will work cross-functionally with design, product, and other engineering teams to ensure reliability and security of IT infrastructure, identify and assess security risks, design and develop advanced security protective mechanisms and products. This is an opportunity to learn the full security life cycle of crypto and Web3 platforms, work along with a top-class security team fighting against worldwide security threats, and manage a global cloud-based IT infrastructure.

About the Hiring Teams

The Tech Governance team is responsible for managing and mitigating data security risks posed within the organization. To identify the data security risks and enhance the company's security management level, this team is responsible for the construction of the company's data security management system, defining the identification of security risks, and driving the implementation of security governance solutions. This team is also accountable for compiling company data security management regulations/polices, optimizing data security management processes, and operating the internal data governance platform.
The Site Reliability Engineering (SRE) team is ensure reliability and security of IT infrastructure, identify and assess security risks, design and develop advanced security protective mechanisms and products. This is an opportunity to learn the full security life cycle of crypto and Web3 platforms, work along with a top-class security team fighting against worldwide security threats, and manage a global cloud-based IT infrastructure.

Responsibilities:

Develop and maintain a data security platform that automates the classification, categorization, and labeling of sensitive data.
Design and implement data discovery and classification algorithms.
Integrate the data security platform with our existing security systems.
Develop and maintain data security documentation.
Stay up-to-date on the latest data security threats and trends.

What You’ll Be Doing

Responsible for service reliability, monitoring, capacity planning and security of the cloud infrastructure.
Build tools for automating changes for a large-scale trading platform across the globe.
Designing, developing, and maintaining high-performance backend systems to support the requirements of client security projects.
Conducting security testing and vulnerability assessments, including penetration testing, vulnerability scanning, and code reviews.
Conducting routine checks and tests to ensure that all known vulnerabilities are detected and patched.
Develop and maintain a data security platform that automates the classification, categorization, and labeling of sensitive data.
Integrate the data security platform with our existing security systems.
Stay up-to-date on the latest data security threats and trends.

What We Look For In You

Bachelors in Computer Science, Technology, Engineering, Mathematics, related technical disciplines, or self-taught enthusiasts.
Basic knowledge of security attack and defense, understanding common vulnerability principles and attack techniques, familiar with the best practices and common solutions of the defense side.
Possessing relevant tech stack skillset for the respective specialization - Java/Python/Go, relational databases, data structures and algorithms, OS, and network computers.
Analytical with a positive problem-solving mindset, a proactive team player who embodies a growth mindset, flexible, and comfortable in navigating ambiguity with a global mindset.
Proficient in Java OR Golang and front-end development.
Drafting data-related policies and procedures (P&P).

Nice to Haves

Comfortable with the cloud-based Linux environment. Knowledgeable in multi-threading and distributed architecture.
Understanding of mainstream messaging frameworks, including Kafka. Or familiar with daily developing tools such as npm, gulp, webpack, git.
Experience in penetration tests, intrusion detection capability development and maintenance, security emergency response, and other related work. Past participation in CTF competitions.
Experience with data security concepts and tools is a plus.
Fluent in spoken and written English and Mandarin.