Security Engineer

Summary

Responsibilities

• Participate in the establishment of the application security system, including security reviews prior to application launch.
• Responsible for overall business security testing and pre-launch code security audits.
• Research and implement source code static analysis techniques for vulnerability detection and analysis.
• Evaluate and enhance the capabilities of static code analysis tools to reduce security risks.
• Develop and refine security technical specifications, including secure development standards and assessment testing protocols.

Requirements

• Bachelor's degree or above with at least 2 years of experience in information security.
• Proficient in code auditing with expertise in one or more languages (e.g., PHP, Java, Golang).
• Familiar with mainstream commercial or open-source static code analysis tools and their principles.
• Understand common vulnerability generation principles and protective measures, as well as static inspection methods.
• Experience in developing static analysis detection tools or using formal methods for static code analysis is preferred.

Benefits