Bybit

Cryptocurrency exchange offering spot and derivatives

Senior Application Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeKuala Lumpur, Federal Territory of Kuala Lumpur, MalaysiaNo salary listedIn-person

About the Job

Requirements

An associate degree or above is required, though this requirement may be relaxed for candidates with strong capabilities.
At least 3 years of business development or audit experience based on Java or Go, including having led or participated in Security Development Lifecycle implementation.
Proficiency in the underlying principles, discovery methods, vulnerable code scenarios, and exploitation techniques of common security vulnerabilities, including but not limited to OWASP Top 10.
Expert-level proficiency in Java and/or Go technology stacks, understanding language-specific characteristics and common mainstream development frameworks, with relevant code audit experience.
Familiarity with common white-box audit methodologies and ability to track and reproduce the latest vulnerabilities.
Familiarity with mainstream development frameworks such as SpringMVC, SSM, Gin, and GoZero.
A solid understanding of penetration testing, proficiency in common penetration testing methods, and familiarity with the principles and exploitation techniques of common vulnerabilities.
Ability to use AI tools proficiently to improve security work efficiency.
Strong logical thinking, communication, coordination, organizational, and documentation-writing abilities.

Responsibilities

Conduct manual code security audits on business code, including Java, Golang, JavaScript, and C++, and write audit reports.
Track domestic and international security developments, and analyze and reproduce the latest security vulnerabilities.
Develop a deep understanding of the company's products and business, identify security risks in business architecture, processes, and logic, and provide corresponding security solutions.
Drive implementation of security solutions and risk governance.

Desired Qualifications

Experience with Trusted Execution Environment and other security encryption and data protection technical architectures, and implementing related solutions.
Have submitted high-quality vulnerabilities to domestic or international security response centers or bug bounty platforms.
Have discovered common vulnerabilities assigned CVE or CNVD identifiers.
Java or Go code audit experience with demonstrated results.

About Us

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.

Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.

Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.

Job Summary:

Primarily responsible for security auditing and security governance of the company's platform systems. Identify potential risks in business requirements and technical implementation plans, provide solutions, and drive their implementation.

Job Responsibilities:

Conduct manual code security audits on business code (Java, Golang, JS, C++, etc.) and write audit reports.
Track domestic and international security developments; analyze and reproduce the latest security vulnerabilities.
Deeply understand and master the company's product business; identify security risks in business architecture, business processes, and business logic; provide corresponding security solutions and drive their implementation.
Drive security solution implementation, risk governance, etc.

Job Requirements:

Associate degree or above; requirements may be relaxed for candidates with strong capabilities.
At least 3+ years of business development or audit experience based on Java or Go; has led or participated in SDL (Security Development Lifecycle) implementation.
Proficient in the underlying principles, discovery methods, vulnerable code scenarios, and exploitation techniques of common security vulnerabilities (not limited to OWASP Top 10).
Expert-level proficiency in Java and/or Go tech stacks; understands language-specific characteristics and common mainstream development frameworks, with relevant code audit experience.
Familiar with common white-box audit methodologies, with the ability to track and reproduce the latest vulnerabilities.
Familiar with mainstream development frameworks such as SpringMVC, SSM, or Gin, GoZero, etc.
Has a solid understanding of penetration testing; proficient in common penetration testing methods and familiar with the principles and exploitation techniques of common vulnerabilities.
Able to proficiently use AI tools to enhance security work efficiency.
Highly proactive with strong logical thinking; possesses good communication, coordination, organizational skills, and documentation writing ability.
Experience with TEE (Trusted Execution Environment) and other security encryption, data protection technical architectures and solution implementation is preferred.

Nice to Have:

Has submitted high-quality vulnerabilities to domestic or international SRC/bug bounty platforms.
Has discovered CVE or CNVD general vulnerabilities.
Has Java or Go code audit experience with demonstrated results.

Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

About the Company

Bybit

Cryptocurrency exchange offering spot and derivatives

Bybit operates a cryptocurrency exchange that provides spot and derivatives trading, mining and staking products, and API access for retail and institutional clients worldwide. Its platform uses an ultra-fast matching engine to execute trades and offers multilingual customer support, aiming to deliver a fast, fair, and humane trading environment. Compared with rivals, Bybit emphasizes reliability, transparency, and strong service, backed by a team with backgrounds from investment banks and tech firms, and a global community. The company’s goal is to be the most trusted and dependable exchange in the emerging digital asset class.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Singapore, Singapore
Founded: 2018

Recently Posted Jobs

Explore more opportunities at Bybit

See more jobs