研发安全实习生（J95091）
Core
Iterating and operating DevSecOps toolchain platforms (container image scanning, code security scanning, black-box scanning, automated vulnerability remediation) and conducting security risk assessments and governance.
Role type
DevSecOps Security Engineer (Intern)
Builds
DevSecOps toolchain platforms and automated security remediation capabilities
Domain
Software Engineering / Application Security
Required skills
Go, Python, Java code auditing, OWASP Top10 vulnerability knowledge, script automation
Preferred skills
DevSecOps toolchain construction experience, Semgrep/Xcheck/CodeQL rule development, engineering capabilities
Technologies
Semgrep, Xcheck, CodeQL, container image scanning, black-box scanning
Responsibilities
Iterate and operate DevSecOps toolchain platforms; conduct security risk assessments and governance; research application security vulnerabilities and provide remediation plans; apply AI to enhance security capabilities and efficiency.
