Senior Application Security Engineer

About the role

Bybit is looking for a Senior Application Security Engineer to lead security auditing and governance of its platform systems. You will work closely with product and engineering teams to identify risks in business requirements and technical implementations, propose solutions and ensure they are deployed.

Key responsibilities

• Conduct manual code security audits on business code (Java, Go, JavaScript, C++) and produce detailed audit reports.
• Monitor domestic and international security developments, analyse new vulnerabilities and reproduce them.
• Identify security risks in business architecture, processes and logic, propose solutions and drive their implementation.
• Lead security solution implementation and risk governance across the platform.

Required profile

• Associate degree or higher (flexible for strong candidates).
• Minimum 3 years of experience in business development or security audit with Java or Go codebases.
• Hands‑on experience implementing a Security Development Lifecycle (SDL).
• Deep understanding of common security vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.

Required skills

• Proficiency in Java and/or Go programming languages.
• Experience with JavaScript and C++ code review.
• Knowledge of OWASP Top 10 vulnerabilities and secure coding practices.
• Ability to conduct manual security code audits and write clear reports.
• Familiarity with security governance and risk management processes.