Senior Application Security Engineer

Responsibilities

• Conduct manual code security audits on business code including Java, Golang, JS, and C++
• Track domestic and international security developments and reproduce latest vulnerabilities
• Identify security risks in business architecture, processes, and logic
• Drive security solution implementation and risk governance

• 3+ years of audit or development experience in Java or Go
• Experience with Security Development Lifecycle (SDL) implementation
• Proficient in OWASP Top 10 and common vulnerability exploitation techniques
• Expert-level proficiency in Java and/or Go tech stacks
• Familiarity with frameworks like SpringMVC, SSM, Gin, or Go Zero
• Solid understanding of penetration testing methods
• Ability to use AI tools to enhance security efficiency

• Experience with TEE (Trusted Execution Environment) and data protection architectures
• History of submitting high-quality vulnerabilities to SRC or bug bounty platforms
• Experience discovering CVE or CNVD general vulnerabilities

• Study Growth Fund for professional development
• Regular internal team-building events and workshops
  
  Global collaboration with a diverse international team
• Opportunities for career advancement and internal mobility

Bybit is a leading cryptocurrency exchange and digital financial platform serving over 80 million users worldwide, providing a seamless ecosystem across trading, payments, and Web
3.