安全工程师 Web3 Security Engineer

data-loadable-begin="3f0hi:z8NN7:qz-Pe:OP-5u" data-loadable-end="3f0hi:z8NN7:qz-Pe:OP-5u"

安全工程师 Web3 Security Engineer

data-loadable-begin="u0VI7:z8NN7:qz-Pe:OP-5u" data-loadable-end="u0VI7:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="CFAQV:z8NN7:qz-Pe:OP-5u" data-loadable-end="CFAQV:z8NN7:qz-Pe:OP-5u" data-loadable-begin="7obd3:z8NN7:qz-Pe:OP-5u" data-loadable-end="7obd3:z8NN7:qz-Pe:OP-5u" data-loadable-begin="ctj29:z8NN7:qz-Pe:OP-5u" data-loadable-end="ctj29:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="vP7ts:z8NN7:qz-Pe:OP-5u"

data-loadable-end="vP7ts:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="Swb7P:z8NN7:qz-Pe:OP-5u" data-loadable-end="Swb7P:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="Hm6N8:EfLS5:z8NN7:qz-Pe:OP-5u" Click link below to apply job 点击下方链接申请岗位 data-loadable-end="Hm6N8:EfLS5:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="0vDZ-:EfLS5:z8NN7:qz-Pe:OP-5u" OneKey Recruit Preview data-loadable-end="0vDZ-:EfLS5:z8NN7:qz-Pe:OP-5u"

职位要求 Job Requirements说明 Description

职位要求 Job Requirements说明 Description

中文 Chinese

要求统招本科及以上学历，网络安全、电子信息、计算机等相关专业； 有2年及以上相关工作经验（可接受应届毕业生，如在校需可提前实习）； 熟悉常见web安全漏洞原理与防范措施，有红蓝攻防和渗透测试经验； 具备基本的英文文档阅读写作能力； 有安全相关项目经历者优先。

职责

主导软硬件产品的后端服务及web服务安全审计、渗透测试、漏洞挖掘；

主导内部红蓝攻防及渗透测试演练；

主导后端安全开发流程（SDL）建设，协助安全运维，保障服务端安全性；

参与安全应急响应与修复工作；

协助推进安全AI能力建设。

加分项

知名CTF比赛获奖经历

知名安全会议经历

知名项目CVE、CNVD漏洞提交者

了解密码学、安全通信协议（TLS，SCP02/03/11等）

English

You are familiar with these

Bachelor's degree or above in Cybersecurity, Electronic Information, Computer Science, or related fields.

Minimum 2 years of relevant work experience (Fresh graduates of 2025/2026 are acceptable; internship is available for current students who can start early).

Familiar with common web security vulnerability principles and mitigation measures, with experience in Red Team/Blue Team exercises and penetration testing.

Possess basic English reading and writing skills for technical documentation.

Candidates with security-related project experience are preferred.

Responsibilities

Lead security audits, penetration testing, and vulnerability discovery for backend services and web services of hardware/software products.

Lead internal Red Team/Blue Team exercises and penetration testing drills.

Lead the development of backend security development lifecycle (SDL) processes, assist in security operations, and ensure server-side security.

Participate in security incident response and remediation efforts.

Assist in advancing security AI capabilities development.

Nice to have

Award-winning experience in well-known CTF competitions.

Participation in renowned security conferences.

Submitter of CVEs or CNVD vulnerabilities in notable projects.

Knowledge of cryptography and secure communication protocols (e.g., TLS, SCP02/03/11).

data-loadable-begin="0Ufwq:EfLS5:z8NN7:qz-Pe:OP-5u" data-loadable-end="0Ufwq:EfLS5:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="11WpM:z8NN7:qz-Pe:OP-5u" data-loadable-end="11WpM:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="liSnz:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="R3F99:liSnz:z8NN7:qz-Pe:OP-5u"

data-loadable-end="R3F99:liSnz:z8NN7:qz-Pe:OP-5u" data-loadable-begin="wgj5o:liSnz:z8NN7:qz-Pe:OP-5u"

data-loadable-end="wgj5o:liSnz:z8NN7:qz-Pe:OP-5u" data-loadable-begin="CmH6Z:liSnz:z8NN7:qz-Pe:OP-5u"

data-loadable-end="CmH6Z:liSnz:z8NN7:qz-Pe:OP-5u"

data-loadable-end="liSnz:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="XLglR:zDMTR:z8NN7:qz-Pe:OP-5u"

data-loadable-end="XLglR:zDMTR:z8NN7:qz-Pe:OP-5u"

data-loadable-begin="3f0hi:z8NN7:qz-Pe:OP-5u" data-loadable-end="3f0hi:z8NN7:qz-Pe:OP-5u"