Job responsibilities

Participate in the design and development of the company's security system related systems and platforms, focusing on core directions such as data security, sensitive information identification and desensitization, and secure operation platforms, continuously improving the company's overall security protection capabilities.
Design and implement security policies and detection logic to support the continuous evolution of business in compliance and security aspects.
Deeply understand the business system architecture, proactively identify potential security risks, and propose practical technical solutions.
Participate in emergency response and review of security incidents, promote continuous optimization and platform construction of security capabilities.
Work closely with infrastructure, group risk control and other teams to promote the efficient implementation of security capabilities throughout the company.

──────

Job requirements

Bachelor's degree or above in computer-related majors, with more than 5 years of research and development experience, and those with a background in security research and development are preferred.
Proficient in Golang/Java/and other multi-language development capabilities, solid foundation in data structures and algorithms, able to undertake the design and development of high-performance and high-reliability systems;
Possess good system design ability and engineering thinking, able to independently complete the entire process from scheme design to online delivery.
Strong communication skills, able to independently responsible for project implementation and efficiently promote cross-departmental progress.

──────

Bonus points

Have experience in security research and development, familiar with common security bugs and attack and defense technologies, covering end point security, cloud security and other fields.
Have practical experience in security research and development of large-scale high-concurrency systems.
Participated in the construction of related platforms such as data security, privacy compliance, and audit systems.
Have experience in contributing to open source security projects, submitting CVE vulnerabilities, or winning security competitions.
Familiar with cloud native security technologies, including Kubernetes, microservice structure, zero trust, etc.