Header Section
Brief Description
Program, deploy and evaluate application information security; enhance professional activities on 0day, vulnerability exploitation techniques.
Qualifications
Training Specialization
Certificates
Scope of Job Responsibilities
Programming and deploying application security
- Program complete secure web applications with full business functionality
- Deploy secure applications with all components.
- Configure information security for OS, DB, Web server components.
Information Security Assessment
- Conduct information security assessments of large, complex applications or those with multiple different platforms.
Risk Analysis and Incident Handling
- Handle information security incidents.
- Analyze 1-day vulnerabilities, write exploitation payloads.
Professional Activities
- Build security guidelines through understanding platforms, technologies and available documentation from manufacturers.
- Provide information security training (awareness, programming, secure configuration) to customers.
Training and professional guidance for students.
- Research 0day, new vulnerability exploitation techniques, new technologies and publish through company seminars, blogs.
- Information security community activities.
Interview Questions
- Good foundational IT knowledge including systems and applications
- Knowledge of secure web application programming provided by the Group.
- Knowledge of whitebox and blackbox web application information security assessment processes.
- Understanding of the Group's security baselines.
- Understanding and proficiency in programming one or more programming frameworks.
- Clear understanding of application vulnerabilities and exploitation techniques of vulnerabilities
- Knowledge of Frameworks used in the Group.
- Knowledge of webshells and detection methods.
- Knowledge of protection and prevention mechanisms, knowledge of analyzing, building 1-day payloads
- Ability to conduct blackbox pentest on a system
- Mentoring skills.
