Staff Engineer, Security Platform Development
Core
Design and build end-to-end DevSecOps platforms, security SDKs/Agents, and runtime protection systems to embed security directly into the software development lifecycle for a crypto exchange.
Role type
Staff Security Platform Engineer (DevSecOps & Runtime Protection)
Builds
DevSecOps platform, security SDKs/Agents, RASP engines, and AI-native security tools
Domain
Cryptocurrency / Blockchain / Cloud-Native Security
Deliverable
production ML models | product features | infrastructure
Required skills
Java (expert), Python or Go, JVM internals, bytecode instrumentation (ASM, ByteBuddy), RASP, SAST/DAST/IAST/SCA, application security (XSS, SQLi, SSRF), LLMs and AI Agents, distributed systems, cloud-native security
Preferred skills
Security engineering at top-tier internet/cloud/security companies, leading DevSecOps platform builds, vulnerability research, red/purple teaming, AI security copilots
Technologies
ASM, ByteBuddy, SonarQube, Coverity, Java Agent, LLMs, AI Agents
Responsibilities
Architect and build end-to-end DevSecOps platforms and security SDKs/Agents; Lead runtime protection via RASP and Java Agent with bytecode instrumentation; Integrate and productize scanning capabilities (SAST, DAST, IAST, SCA); Design detection and remediation for web/API vulnerabilities; Apply LLMs and AI Agents to vulnerability analysis and automation; Embed as security expert to drive standards and release gates
Seniority
Staff, hands-on IC with strategic ownership