应用安全工程师-安全与风控
Core
挖掘国际电商业务应用及APP漏洞，治理安全风险，并在SDLC中前置规避风险以系统化解决安全问题。
Role type
application security engineer (e-commerce)
Builds
secure e-commerce applications and apps
Domain
e-commerce + application security
Required skills
web/app/system vulnerability analysis, white-box code audit (Python/Go/Node.js/Java), SDLC/DevSecOps体系建设, penetration testing, vulnerability management, security incident response, automation of security tasks
Preferred skills
knowledge of data security, privacy compliance, architecture security, proactive research of latest security trends
Technologies
Python, Go, Node.js, Java
Responsibilities
conduct vulnerability mining and risk governance for international e-commerce apps; participate in building and optimizing SDLC security systems; perform code audits, penetration tests, and攻防演练; respond to security incidents and collaborate across departments
Seniority
mid-level IC
