Recruiting security engineers on Sina Weibo

Sina Weibo is a Twitter-like website that provides micro-blog services. Users can publish messages or upload images through webpages, WAP pages, mobile clients, text messages, and MMS. In March 27, 2014, Sina Weibo officially changed its name to "Weibo". Weibo was officially listed on Nasdaq in the United States in April 17, 2014.

Security testing engineer (Application Security)

Job description:

1. Responsible for application security testing and risk assessment of core businesses, and promoting implementation of security solutions

2. Development and functions of automated security detection tools and log analysis systems & Performance Optimization

3. Responsible for white-box code auditing for core projects (PHP)

4. Internal security coding and training (application security/Mobile Security)

5. Tracking security trends of security communities, analyzing and mining vulnerabilities, and researching cutting-edge security defense technologies

Job requirements:

1. Familiar with common security vulnerability principles, such as SQLi, XSS, and CSRF, and able to independently mine web or mobile client security vulnerabilities

2. Familiar with at least one language in php/python/perl/shell scripts

3. Familiar with mainstream PHP frameworks, have a certain understanding of PHP code security auditing, and be able to independently review white-box code

4. Good communication and coordination skills

The following experience is preferred:

1. Experience in security defense

2. Experience in developing automated security detection tools

3. Experience in large-scale internet security

4. Mobile security (Android/iOS) experience

5. Submitted vulnerability information on mainstream security platforms at home and abroad

Work location:

Zhongguancun, Haidian district, Beijing

Salary: 15 K-30 K

You are welcome to join us! Send your resume to shiyao # staff.weibo.com (your resume is from FreeBuf. If you have posted an article on FB, Please attach it to the email)