Client Security Expert/Architect

OKX • Ottawa, ON

2d

About The Position

This role involves two distinct but related positions: Client Security Expert and Client Security Architect. The Client Security Expert focuses on identifying and mitigating client-side security risks through offensive and defensive exercises, analyzing attack techniques, and designing systematic defense solutions. The Client Security Architect is responsible for the overall architecture design of client-side security, ensuring system performance and scalability, designing backend data pipelines, and incorporating AI Agent capabilities for intelligent security operations and automated countermeasures.

All official OKX vacancies are published on their official careers website. Information collected and processed as part of the recruitment process is subject to OKX's Candidate Privacy Notice.

Requirements

• Bachelor's degree or above in Computer Science or a related field.
• Familiar with low-level Android and iOS system architecture, security mechanisms, and reverse engineering.
• Familiar with typical cheating/fraud techniques used by black/gray-market actors.
• Proficient in leveraging AI Agents for security workflows, including reverse engineering, vulnerability discovery, attack reconstruction, and log/data analysis, with hands-on experience integrating AI tools into daily security operations.
• 3+ years of experience in backend development or architecture design.
• Strong backend architecture skills, with expertise in high-concurrency, high-availability distributed system design.
• Familiarity with the client security domain (e.g., device fingerprinting, environment detection, behavioral risk control), with the ability to understand endpoint-collected data and design corresponding backend processing solutions.
• Familiar with AI Agent technical principles and application paradigms, with practical experience integrating AI capabilities into security architecture design.

Nice To Haves

• Client security experience in Web3/blockchain scenarios.
• Familiarity with browser-side security.
• Risk control system architecture (e.g., rule engines).
• Security backend experience in Web3/blockchain scenarios.
• Architecture experience in security data platforms or threat intelligence systems.

Responsibilities

• Identify client-side security risks, propose solutions, and drive their implementation.
• Lead offensive and defensive exercises on mobile clients, and drive remediation of business-related risk issues.
• Analyze attack techniques used by black/gray-market actors, reconstruct attack mechanisms and details, and produce countermeasure plans.
• Design and build systematic client-side defense solutions to improve defensive effectiveness and mitigation efficiency.
• Own the overall architecture design for client-side security, ensuring high availability, high performance, and scalability of the system.
• Design and optimize the backend data pipeline for security data collection, processing, and analysis, supporting various business scenarios.
• Incorporate AI Agent capabilities to design intelligent security strategy operations and automated countermeasure architecture, improving strategy iteration speed and incident response speed.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior