About the role
<div data-page-id="Y7HSd59lcoI1BGxLy8jlqxZKgTg" data-lark-html-role="root" data-docx-has-block-data="false">
<div class="ace-line ace-line old-record-id-Gvrsd3KZkoiEpQxM1qRlAn4Ngta">
<div data-page-id="Y7HSd59lcoI1BGxLy8jlqxZKgTg" data-lark-html-role="root" data-docx-has-block-data="false">
<div class="ace-line ace-line old-record-id-YWZkd982CopaXcxaoNglKtLOgqb"><br>
<h2><strong>Who We Are</strong></h2>
<p>At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. </p>
<p>OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.</p>
<p>Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.</p>
<p>OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.</p>
<div data-page-id="DEWydktFLo4ARlxtqUuu9DX4sAd" data-lark-html-role="root" data-docx-has-block-data="false">
<div class="ace-line ace-line old-record-id-Vclfd4PL7opuBCxw8PXupTossVg">
<p><strong><br>Responsibilities</strong></p>
<ul>
<li class="ace-line ace-line old-record-id-A8TCd02Myo7fhcxwrsglP0lKgfc" data-list="number">
<div>AI-Driven Code Security Detection Engine</div>
<ol class="list-number2">
<li class="ace-line ace-line old-record-id-RP4DdZH9cocSPyxbZiylWX9tg9K" data-list="bullet">
<div>
<p>Design and implement a multi-agent collaborative code auditing system covering vulnerability detection, malicious code identification, and sensitive information leakage scenarios; lead the role decomposition of Planners/Executors/Critics, tool invocation chains, and cross-agent state synchronization mechanism design.</p>
</div>
</li>
<li class="ace-line ace-line old-record-id-ZrhZdOhCjoZQsZx88GDlZtqEgVh" data-list="bullet">
<div>Integrate RAG, Chain-of-Thought, Reflection, and other technologies into security audit agents. Continuously optimize detection accuracy and recall rates while establishing a quantifiable evaluation and iteration framework.</div>
</li>
<li class="ace-line ace-line old-record-id-LsIOdkmU2oCfidxsUpxlTyN1geb" data-list="bullet">
<div>Deeply integrate with DevSecOps workflows. Develop plugins for mainstream pipelines like GitLab CI/CD, Tekton, and Jenkins to achieve “audit-on-commit.”</div>
</li>
</ol>
</li>
<li class="ace-line ace-line old-record-id-PGeGdCqPnoePPjxzr00lWmnxg4y" data-list="number">
<div>AI System Security Protection and Threat Response</div>
<ol class="list-number2">
<li class="ace-line ace-line old-record-id-D6tydMJOeo6UpfxElftlqdTIgWb" data-list="bullet">
<div>
<p>Responsible for constructing a security protection framework for large language model applications, covering three dimensions: input layer (prompt injection, jailbreak detection), output layer (sensitive information leakage, compliance auditing), and runtime (tool invocation sandboxing, anomaly behavior circuit breaking).</p>
</div>
</li>
<li class="ace-line ace-line old-record-id-YstAdO1P8opg0yxGH0clpEkwgUd" data-list="bullet">
<div>Develop Agent workflows for automated alert classification, contextual correlation, and false positive filtering. Integrate RAG-driven threat intelligence retrieval to generate automated analysis conclusions, supporting SOAR platform integration.</div>
</li>
<li class="ace-line ace-line old-record-id-RjfEd62uboA18pxwlOflK9XSgsg" data-list="bullet">
<div>Design human-machine collaboration intervention mechanisms and Agent behavior audit systems to ensure observability, traceability, and intervenability of Agent actions in production environments, adhering to industry standards like the OWASP Top 10 Risks for LLMs.</div>
</li>
</ol>
</li>
<li class="ace-line ace-line old-record-id-B5P4d22vGoIN1jxzrfLlPNGBgrf" data-list="number">Engineering Development and Platform Services
<ol>
<li>Construct a highly available, scalable Agent service architecture supporting large-scale concurrent scanning task scheduling and fault tolerance.</li>
<li>Oversee standardized API output for detection capabilities, building closed-loop systems for rule management, result visualization, and false positive feedback.</li>
</ol>
</li>
</ul>
<p><strong>Requirements</strong></p>
<ul>
<li>Development Experience: 3+ years of backend development experience, proficient in at least one of Python/Go/Java, with a solid engineering foundation.</li>
<li>Agent Implementation & Security: Hands-on experience deploying LLM Agents (not just demos), capable of detailing engineering challenges such as Agent architecture design, hallucination handling, and tool invocation fault tolerance; Hands-on experience with AI security, understanding risks like prompt injection, jailbreaking, malicious agent injection, and tool misuse, with implementable defense strategies.</li>
<li>Framework Proficiency: Familiarity with at least one agent framework (LangChain, LlamaIndex, AutoGen, CrewAI, or LangGraph), with production project experience.</li>
<li>Engineering Capabilities: Proficient in Docker and Kubernetes, with expertise in microservices architecture design and deployment.</li>
</ul>
<p><strong>Preferred Qualifications</strong></p>
<ul>
<li class="ace-line ace-line old-record-id-RPS7d31u9oHRqCxReAClIL9mgSd" data-list="bullet">
<div>Security Tool Experience: Experience with SAST/SCA tools, or deep usage of code auditing tools like CodeQL, Semgrep, or SonarQube.</div>
</li>
<li class="ace-line ace-line old-record-id-EcQ4dp5gloh7ubxXK5Blvoyggze" data-list="bullet">
<div>Model Fine-Tuning: Experience with LLM fine-tuning (SFT, LoRA), or familiarity with local deployment and optimization of models like Llama 3, Qwen, or DeepSeek. Bonus points for security-domain fine-tuning experience, such as training and evaluating security detection models for malicious prompt detection, unauthorized access identification, or harmful content filtering.</div>
</li>
<li class="ace-line ace-line old-record-id-QYundIW6ToToloxQC0HlTANOg8f" data-list="bullet">
<div>Open-Source Contributions: High-quality open-source projects related to agents on GitHub, or pull requests submitted to mainstream LLM frameworks.</div>
</li>
<li class="ace-line ace-line old-record-id-A5vXdkYG3oCPVKx6Lhzlhv7kgSf" data-list="bullet">
<div>Security Competitions: Awards from CTF competitions, or a track record of submitting CVE/CNVD vulnerabilities.</div>
</li>
</ul>
</div>
</div>
<h3><strong><br>Perks & Benefits</strong></h3>
<ul>
<li>Competitive total compensation package</li>
<li>L&D programs and Education subsidy for employees' growth and development</li>
<li>Various team building programs and company events</li>
<li>Wellness and meal allowances</li>
<li>Comprehensive healthcare schemes for employees and dependants</li>
<li>More that we love to tell you along the process!<br><br><br><em><span class="text-only text-font-italic" data-eleid="32"><span class="text-only">Please note that Hong Kong is a group-level service hub, and </span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only"> does not carry on a business of operating a virtual asset trading platform in Hong Kong.</span></span></em></li>
</ul>
</div>
</div>
</div>
</div><div class="content-conclusion"><div data-lark-html-role="root"><span class="text-only" data-eleid="18"><span class="text-only"><span class="text-only" data-eleid="6">Notice:<br></span></span></span>
<div data-lark-html-role="root"><span class="text-only" data-eleid="26"><span class="text-only">All official </span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only"> vacancies are published on this website.</span></span> <span class="text-only" data-eleid="28"><span class="text-only">While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. </span></span><strong><span class="text-only" data-eleid="29"><span class="text-only">If in doubt, please apply directly through our official careers website.</span></span></strong></div>
</div>
<div data-lark-html-role="root"><span class="text-only" data-eleid="18"><span class="text-only">Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to </span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only">'s </span></span><a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link" href="https://www.okx.com/en-eu/help/okx-candidate-privacy-notice" target="_blank" data-eleid="19" data-lark-is-custom="true" data-lark-link="true">Candidate Privacy Notice</a><span class="text-only" data-eleid="20"><span class="text-only">.</span></span></div></div>