Senior Application Security Engineer

About the role

Bybit is seeking a Senior Application Security Engineer to lead security auditing and governance across its platform. The role involves identifying risks in business requirements and technical implementations, proposing solutions, and driving their adoption.

Key responsibilities

• Conduct manual code security audits on business code written in Java, Go, JavaScript, C++ and produce detailed audit reports.
• Monitor domestic and international security developments, analyze and reproduce emerging vulnerabilities.
• Understand Bybit’s product landscape to pinpoint security risks in architecture, processes and logic, and deliver mitigation strategies.
• Drive implementation of security solutions and oversee risk governance initiatives.

Required profile

• Associate degree or higher (flexible for candidates with strong capabilities).
• Minimum 3 years of development or audit experience with Java or Go, including participation in a Security Development Lifecycle.
• Deep knowledge of common security vulnerabilities (beyond OWASP Top 10) and their exploitation techniques.
• Proficiency in Java and/or Go ecosystems, familiar with frameworks such as SpringMVC, SSM, Gin or GoZero.
• Experience with white‑box audit methodologies and penetration testing.
• Ability to leverage AI tools to improve security workflow efficiency.
• Strong logical thinking, communication and documentation skills.
• Preferred: experience with Trusted Execution Environment (TEE) or other encryption/data‑protection architectures.

Required skills

• Java
• Go (Golang)
• JavaScript
• C++
• OWASP Top 10
• SpringMVC / SSM
• Gin / GoZero
• Penetration testing
• AI‑assisted security tooling
• Trusted Execution Environment (TEE)

What we offer

• Study Growth Fund for continuous learning.
• Regular internal events and team‑building activities.
• Opportunities for global collaboration with an international team.
• Clear career advancement paths within a fast‑growing company.
• Internal mobility to support long‑term development.