Summary

Your Role

1. Responsible for demand risk identification and security review, code audit, pre-launch testing, and post-launch risk monitoring during the R&D process;
2. Responsible for following up on security vulnerability handling and vulnerability warning operations, and assisting in business repairs until the vulnerability is closed;
3. Provide security training for developers and provide effective solutions to security issues in the code;
4. Conduct emergency response to security incidents and resolve security issues in a timely manner;
5. Continuously track and operate intelligence collection, analysis, and mining in related fields to provide risk warnings;
6. Regularly coordinate with business departments to synchronize the latest security status, requirements and specifications, and work with business departments to implement them.

Your Craft

1. Bachelor degree or above, more than 5 years of experience in penetration and code auditing;
2. Master at least one development language (Nodejs, Golang, etc.);
3. Master security emergency response technologies and processes;
4. Familiar with penetration testing and APT attack and defense techniques, and familiar with intranet penetration (not limited to various types of lateral privilege escaping, anti-killing techniques, tunnel penetration techniques, etc.);
5. Familiar with common Internet business scenario security design and data security best practices;
6. Familiar with common encryption signature algorithms, TLS, OAuth, JWT and related technologies;
7. Familiar with common public chains (BTC/ETH, etc.) and the basic working principles of digital currency wallets;
8. Active thinking and strong learning ability.

Extra Credit

1. Experience in threat modeling, SDL/devsecops;
2. Have experience in APT tracing;
3. Experience in developing security tools and platforms;
4. Have experience in emergency plan customization and response, and experience in continuous tracking and operation of intelligence in related fields.

Skills

• Development
• Software Engineering