Senior Staff Engineer Security Platform Development
Summary
Lead architecture and development of a DevSecOps platform, Java runtime protection, and AI-driven security automation for a crypto exchange.
You will lead development of security engineering and DevSecOps capabilities, including security products, platforms, SDKs, and Agents. You will develop Java runtime protection, integrate security scanning into CI/CD, address application vulnerabilities, apply AI to security workflows, and drive security governance across engineering teams.
Responsibilities
- Lead architecture and development of the DevSecOps platform and security products
- Develop SDKs and Agents for code, build, artifact, image, deployment, and runtime security
- Design and develop RASP and Java Agent runtime protection
- Implement bytecode enhancement, runtime hooks, and detection and blocking engines
- Integrate security scanning into CI/CD workflows
- Build scanning, gating, remediation, and re-validation processes
- Develop application security protections for web, API, and microservice vulnerabilities
- Apply LLMs and AI Agents to vulnerability analysis and security automation
- Drive security standards, integration rules, quality gates, and remediation workflows
- Collaborate with stakeholders to deliver scalable security capabilities
Requirements
- Computer Science
- Operating systems
- Networking
- Compilers
- JVM internals
- Distributed systems
- Application security
- Cloud-native security
- Software supply-chain security
- Java
- ClassLoader
- Java Agent
- ASM
- ByteBuddy
- Bytecode instrumentation
- Profiling
- Performance tuning
- Python
- Golang
- RASP
- SAST
- DAST
- IAST
- SCA
- Image security
- Code security scanning
- Vulnerability analysis
- Penetration testing
- LLM
- AI Agents
- Security governance
Benefits
- L&D programs
- Education subsidy
- Team building programs
- Company events
- Wellness allowances
- Meal allowances
- Healthcare schemes for employees and dependants