Senior Engineer - Network Security

Who We Are

  At OKX, we believe our future is reshaped with technology. Founded in 2017, OKX is one of the world’s leading cryptocurrency spot and derivatives exchanges. OKX innovatively adopted blockchain technology to reshape the financial ecosystem by offering some of the most diverse and sophisticated products, solutions, and trading tools on the market. Trusted by more than 20 million users in over 180 regions globally, OKX strives to provide an engaging platform that empowers every individual to explore the world of crypto. In addition to its world-class DeFi exchange, OKX serves its users with OKX Insights, a research arm that is at the cutting edge of the latest trends in the cryptocurrency industry. With its extensive range of crypto products and services, and unwavering commitment to innovation, OKX vision is a world of financial access backed by blockchain and the power of decentralized finance.   We invest in our people as much as we invest in technology. We are united by our engaging culture, here we win as a team, embrace changes, and do the right thing. We are committed to creating a friendly, rewarding and diverse environment for OKers. It doesn’t matter where you come from, here everyone feels valued, respected and has the same opportunities to develop and thrive — we want to bring out the best in you.  

About the Opportunity

  What You’ll Be Doing:

• Build data security detection capabilities, including but not limited to Endpoint DLP, Browser DLP, IM DLP, Mail DLP;
• Continuously validate existing data security rules and models, follow up on data security incident identification, response, disposal, investigation, and evidence collection;
• Continuously improve the risk identification capability of data security, enhance the overall detection level and coverage through data security rules and models, build data asset maps, track the data flow process through graph detection and other technologies, and identify the risks of sensitive data outsourcing.

• •  

What We Look For In You: 

Having a background in information security, network security, or computer related fields, with 3 to 5 years of work experience in data security

• Familiar with the data security lifecycle, understand the data security risk points and key construction work content of each lifecycle;

• Familiar with common security attack and defense techniques, capable of security operation and construction, with rich experience in discovering and managing data security risks, and data sensitivity

• Familiar with data security products and data security detection methods, such as data leakage prevention, UEBA, sensitive data identification, data encryption and decryption, data sharing, etc;\

• Having experience and capabilities in enterprise level terminal data security, such as Endpoint DLP, Browser DLP, IM DLP, Mail DLP. Experience in host security, familiarity with Macos and Linux operating systems, and practical experience in data threat modeling are preferred;

• Having experience and capabilities in enterprise level big data analysis, such as Flink Hive、Spark、ElasticSearch、Graph. Practical experience in information security data mining, data analysis, and intelligence analysis is preferred;

• Strong logical thinking ability, communication and collaboration skills, compliance and legal awareness.