Sina Weibo recruitment security engineer

Weibo is a Twitter-like website that provides micro-blogging services. Users can post messages or upload images via web pages, WAP pages, mobile clients, mobile phone messages, multimedia messages. On March 27, 2014, Sina Weibo officially changed its name to "Weibo", and Weibo was officially listed on the Nasdaq in the United States on April 17, 2014.

Safety Test Engineer (Application safety direction)

Job Description:

1. Responsible for core business application security testing and risk assessment to drive landing safety solutions

2. Development and Function & Performance optimization of automated security Detection tool and log analysis system

3. White Box Code Audit (PHP) for core projects

4. Internal security coding and Training (application Security/mobile Security)

5. Track security dynamics in the security community and conduct research on vulnerability analysis, mining, and frontier security attack and defense techniques

Job Requirements:

1. Familiar with common security vulnerability principles, such as (SQLI,XSS,CSRF), ability to independently mine Web or mobile client security vulnerabilities

2. Proficiency in at least one language in a Php/python/perl/shell script

3. Familiar with the mainstream PHP framework, the PHP code security Audit has a certain understanding, and can be independent of the White Box code review

4. Good communication and coordination skills.

The following experience is preferred:

1. Have a safe and defensive experience

2. Experience in developing automated safety inspection tools

3. Experience with large-scale Internet security work

4. Mobile Security (Android/ios) related experience

5. Vulnerability information submitted at domestic and foreign mainstream security platforms

Work Location:

Zhongguancun, Haidian District, Beijing

Salary: 15k-30k

Welcome lively and cheerful classmates to join us! Please send your CV to shiyao#staff.weibo.com (CV indicated from Freebuf. If there is an article in FB, please attach in the mail)

