腾讯云-应用安全工程师
Core
Application security engineer responsible for DevSecOps integration, vulnerability management, and threat modeling for Tencent Cloud products.
Role type
Senior Application Security Engineer
Builds
Secure product releases and hardened application architectures
Domain
Cloud Security / Application Security
Required skills
Code audit, Web vulnerability exploitation (XSS, SQLi, SSRF), Penetration testing, Threat modeling, WAF/RASP configuration, Binary/Container security analysis, Tool development
Preferred skills
SRC platform submissions, Community article publications, Red team participation (Hu Wang)
Technologies
Golang, Python, PHP, C, WAF, RASP, SCA, Black/Gray/White box testing tools
Responsibilities
Conduct code audits and vulnerability scanning across product lines; Execute full-link attack-defense drills and threat modeling; Develop customized security solutions and tools for specific business lines; Integrate security into DevSecOps release pipelines; Review product architectures for security risks.
Seniority
Senior, hands-on IC
