Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

网络安全工程师

chitu-ai/index15 open roles

Where
Beijing, Chinese Mainland
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen now网络安全工程师chitu-ai/index · Beijing, Chinese Mainland

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on chitu-ai/index's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. chitu-ai/index postings stay open a median of 12 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 3 days ago

chitu-ai/index median: 12 days open

The posting

1. 在授权范围内对 Web 应用、API、App、小程序、内网系统及云上资产开展渗透测试与漏洞挖掘，输出可复现的攻击路径与修复方案。 2. 参与内部红蓝对抗、护网行动与重保任务，模拟完整攻击链：信息收集、外部突破、横向移动、权限提升、权限维持，验证蓝队检测与响应能力。 3. 跟进漏洞闭环，与研发共同确认修复方案并复测验证，修复不彻底则重新验证，直至风险消除。 4. 将重复性测试工作自动化，按需开发或二开扫描器、POC/EXP、内网工具，维护团队攻击工具链与知识库。 5. 跟踪新披露 CVE、公开利用链与绕过手法，完成复现验证并评估对自身业务的影响。 6. 参与安全事件应急响应轮值，完成取证分析、攻击溯源与止血处置，输出事件复盘报告。

1. 学历与院校不设门槛，本科、大专、自学、培训班、肄业、跨专业均可投递；我们看实战能力与产出，不看毕业院校。 2. 理解 OWASP Top 10 漏洞原理，能独立构造 PoC 并手工验证，不依赖扫描器出报告。 3. 至少熟练掌握一门语言并达到可编写工具的程度，Python / Go / Java / PHP / JS / Rust 均可。 4. 熟悉 Linux 系统，能完成日志分析、命令组合、环境搭建与调试。 5. 熟练使用 Burp Suite、nmap、sqlmap、Metasploit、fscan 等主流工具，理解其底层原理与适用边界。 6. 具备独立开展渗透测试的能力，能完整输出攻击路径、风险等级与可落地的加固建议。 7. 沟通表达清晰，能向非安全背景的研发与业务人员讲清漏洞危害与修复方式。 8. 具备良好的职业操守与合规意识，严格在授权范围内作业，发现越界数据立即停手、上报并留痕。 9. 无相关违法犯罪记录。 加分项 1. 在 SRC、CNVD、CNNVD 提交过原创漏洞，或持有 CVE 编号。 2. 具备内网横向、域渗透、AD 攻击链实战经验。 3. 具备免杀、C2 框架使用或二开经验。 4. 具备移动端逆向能力，熟悉 Frida、jadx、IDA、MobSF 等工具。 5. 具备代码审计能力，熟悉 Java 反序列化、PHP 变量覆盖、SSTI、逻辑越权等常见缺陷。 6. 具备云上攻击路径经验，包括 AK/SK 泄露接管、元数据服务利用、容器逃逸等。 7. 有 CTF 竞赛获奖经历。 8. GitHub 上有自研安全工具，代码可用、有实际使用场景。 9. 有护网或红蓝对抗实战经验。 10. 在技术社区发表过漏洞分析或攻防研究文章。 11. 持有 OSCP、CISP-PTE、CRTP 等安全认证。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against chitu-ai/index's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on chitu-ai/index's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    chitu-ai/index's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.