【北京市】【外企】【Security Engineer (Application Security)】

eckofy

公司简介：外企、数据分析

职位名称：网络信息安全


Security Engineer (Application Security)
Engineering | Beijing, China
We are looking for an Application Security Engineer responsible for monitoring, implementing and hardening the security of our web applications, API and Mobile Apps. As a Security Engineer in the company you need to define, assess, monitor and improve the security practices of our developers, as well as actively assist in the implementation of our information security program. You will report directly to our Security Director. Creative mindset and hands-on application security experience, including SDLC experience will be required for this position. This is a great opportunity to join us and apply your skills to secure our fast-growing awesome big data applications.

Your responsibilities will include:
Take ownership of the Application Security Standard, ensure application on all projects, monitor compliance and propose improvements, in line with our established Information Security Policies and Standards.
Working very closely with the Engineering Development teams ensuring new products and features meet Security requirements.
Assist the Engineering Development teams in the identification and implementation of appropriate security functionalities to ensure uniform application of the security policy and standards.
Perform platform application security monitoring, propose and implement control improvements and pragmatic tools.
Improve company security policies, technical standards and development procedures to follow the best security practices in line with our business requirements.
Contribute to the security planning, assessment, risk management and awareness activities for application security in the company.
Monitor security vulnerabilities and threats on the environment.

You
You should have a good experience in the information security or production systems operation field and be ready to take the responsibility of managing this important part of company.
3+ years experience in an information security position.
Strong skills with python language and Linux systems (ubuntu, debian), on open source platforms.
Deep understanding of Secure Development Lifecycle in an Agile environment.
Has security expertise in one or more of the following: application security; intrusion detection (IDS/IPS); web application firewall tuning (WAF); security code review; static analysis; agile development processes; risk management; security audit & testing; penetration testing; vulnerability scanning; incident handling; cryptography best practices; code change management & workflows; agile development.
Knowledge and experience in one or more of the following areas is a plus:

Secure application development practices
Configuration management tools (salt,chef,puppet)
AWS Cloud services (EC2, SQS, S3, ...)
RDBMS, NoSQL or BigData database security

Hands-on experience ensuring the security of an Internet production system is a big plus.
Knowledge and experience with ISO 27002, PCI-DSS or other information security standards is a plus.
Security certifications appreciated (CISSP, CEH, ...).
Must have good judgment, problem-solving and decision-making skills.
Pragmatic, rigorous, strong will to learn and improve in a fast-paced environment.
Good English written and verbal communication skills required.


工作地点北京，有意者请发送CV到以下联系方式，如果合适我们会很快与您联络。
Email: eckofy@163.com
qq: 2107553969

eckofy

继续招聘。

eckofy

继续招聘，合适会很快安排面试。