Job Description

: Key Job Responsibilities Participate in the implementation of secure Software Development Life Cycle (SDLC), and be responsible for the security solution reviews, security design and technical assessment for business departments Improve the secure SDLC, build the standard system, and formulate relevant security standards and requirements Produce security solutions and security test reports, provide advice in patching vulnerabilities and follow up with the risk mitigation Evaluate the risk points of mainstream application frameworks and develop security solutions to provide security support for each business line Requirements: Key Job Requirements Bachelor\'s degree in Computer Science, Engineering or related fields More than 5 years of relevant work experience Familiar with OWASP TOP 10 vulnerabilities, and have a deep understanding of the principle, utilisation, patching, and reinforcement of various vulnerabilities Familiar with the implementation of enterprise\'s SDLC process, have work experience in building secure SDLC for IT companies. Having been in charge of secure SDLC for a large dev team. Familiar with black box testing methods and paths, able to independently complete source code auditing work, have hands-on experience in security design checklist Familiar with at least one programming language such as Java, Python, PHP, Go, C, etc., and proficient in reading design documents and related codes Having understanding in common business logic vulnerabilities such as authentication, ultra vires, and tampering, and experiences independently exploring business logic vulnerabilities would be a bonus Extensive experience in vulnerability mining, code auditing and security solutions Experience in vulnerability mining at the framework level is preferred Bonus Points Having been credited to high-risk CVEs for well-known projects Having contributed to the development of open-source projects. Experience working in team collaborative development and familiar with development tools. Fluent English communication skills for effective collaboration with multinational teams

foundit