HashKey Group
Other · 100 To 499 Employees
HashKey Group is an end-to-end digital asset financial services group in Asia, offering new investment opportunities and solutions to institutions, family offices, funds and professional investors across the digital asset and blockchain ecosystem. The Group provides a complete ecosystem across the entire digital asset landscape, ranging from venture investment, to custody, to technologies and trading. By bringing together the most advanced blockchain research, developers and technologies, HashKey identifies potential opportunities and deliver end-to-end solutions that operate within regulatory frameworks with the highest compliance standards. The Group has operations in Hong Kong, Singapore and Japan, and extensive partnerships with FinTech and blockchain solutions providers, academic institutions, and associations.
应用安全工程师
60,000 - 100,000 CNY/Annually
Daisy
HashKey Group · 招聘经理
Job Description
应用安全工程师
岗位职责:
1. 负责公司业务应用安全体系规划与设计,对核心业务及重点项目进行源代码审计,确保应用程序代码、业务逻辑以及正在使用的开源或外购软件的安全。
2. 产品的需求安全评审,应用上线前黑白盒安全审核以及上线后的渗透测试
3. 负责对研发人员进行漏洞培训,提升研发人员安全开发意识
4. 应用安全事件及外部报告漏洞的安全应急响应
5. 应用安全成熟度建设、效能建设、自动化安全检测能力建设
任职要求:
1. 熟悉Java语言生态,精通代码安全审计,对Golang、Python其一比较熟悉
2. 熟悉常见应用漏洞原理、检测方法、利用手段以及完整的解决方案
3. 熟悉应用安全平台的建设和运营工作,如IAST、SCA工具平台
4. 熟悉区块链安全优先