Senior Application Security Engineer

As a Senior Application Security Engineer at Bybit, you lead security auditing and governance of a cryptocurrency exchange platform serving over 80 million users across more than 200 countries and regions. You identify potential risks in business requirements and technical implementation, provide solutions, and drive their adoption across the organization.

What you'll do

• Conduct manual code security audits on business code written in Java, Golang, JavaScript, C++, and other languages, and produce comprehensive audit reports.
• Track domestic and international security developments, analyze and reproduce the latest security vulnerabilities.
• Deeply understand the company's product business and identify security risks in business architecture, processes, and logic; propose and implement corresponding security solutions.
• Drive security solution implementation and risk governance across the platform.

What you bring

• Associate degree or above (requirements may be relaxed for candidates with strong capabilities).
• At least 3+ years of business development or audit experience based on Java or Go, with experience leading or participating in SDL (Security Development Lifecycle) implementation.
• Proficient understanding of common security vulnerabilities, including OWASP Top 10, including their underlying principles, discovery methods, vulnerable code scenarios, and exploitation techniques.
• Expert-level proficiency in Java and/or Go tech stacks, with understanding of language-specific characteristics and common mainstream development frameworks, and relevant code audit experience.
• Familiarity with common white-box audit methodologies and ability to track and reproduce the latest vulnerabilities.
• Knowledge of mainstream development frameworks such as SpringMVC, SSM, Gin, or GoZero.
• Solid understanding of penetration testing methodologies, with proficiency in common techniques and familiarity with principles and exploitation techniques of common vulnerabilities.
• Proficiency in using AI tools to enhance security work efficiency.
• Highly proactive with strong logical thinking, excellent communication, coordination, organizational skills, and technical documentation writing ability.

Nice to have

• Submission of high-quality vulnerabilities to domestic or international SRC or bug bounty platforms.
• Discovery of CVE or CNVD general vulnerabilities.
• Demonstrated results from Java or Go code audit experience.
• Experience with TEE (Trusted Execution Environment) and other security encryption and data protection technical architectures and solution implementation.

What we offer

• Study Growth Fund supporting your professional development and continuous learning.
• Internal events including team-building activities, workshops, and collaborative innovation sessions.
• Work with a diverse, international team in global collaboration.
• Career advancement opportunities within a rapidly expanding global company.
• Internal mobility and opportunities for long-term career development.

About Bybit

Bybit is one of the world's leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. The company delivers a seamless ecosystem spanning trading, payments, wealth management, custody, institutional services, and Web3, recognized for being one of the most trusted and transparent platforms in the digital asset industry.