Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 123 days ago

【集团】应用安全工程师（渗透&SDL方向）

jtexpress/index240 open roles

Where
Shanghai, Chinese Mainland
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen now【集团】应用安全工程师（渗透&SDL方向）jtexpress/index · Shanghai, Chinese Mainland

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on jtexpress/index's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 123 days ago

The posting

岗位简介 负责公司内部应用安全与数据安全建设，覆盖日常渗透测试、SDL安全开发流程落地、黑盒自动化安全工具开发运营、白盒扫描告警研判、数据安全治理等工作，推进安全左移，排查业务及数据安全风险，闭环全链路安全漏洞。 岗位职责 1. 日常渗透测试：负责Web系统、接口、内部业务系统常态化渗透测试，挖掘业务逻辑漏洞及通用Web漏洞，输出测试报告，跟进漏洞修复与复测，完成风险闭环。 2. SDL落地推进：落地软件安全开发生命周期全流程规范，推动研发流程安全准入、代码安全规范落地，开展研发侧安全宣导与流程稽核，落实安全左移。 3. 黑盒自动化工具建设：负责黑盒自动化安全测试工具二次开发、功能迭代与日常运营，优化扫描规则与扫描效率，依托自动化能力减少人工重复测试工作量。 4. 白盒告警研判：负责静态代码白盒扫描工具每日告警研判，甄别误报、梳理真实漏洞，同步研发修复代码层安全缺陷，统计告警数据并优化扫描策略。 5. 数据安全治理：参与公司内部数据安全治理工作，梳理业务敏感数据资产，配合完成数据权限审计、数据接口安全检测、数据泄露风险排查，落实数据安全管控要求； 6. 安全汇报：输出各类安全周报、月报、漏洞复盘报告，沉淀安全知识库与漏洞案例，对研发团队开展常态化安全培训； 7. 安全应急处理：跟进行业高危漏洞（如Log4j、Fastjson等），完成内部资产应急排查与漏洞修复推进； 8. 安全审计：合等保测评、内部安全审计、外部安全检查，整理对应的安全佐证材料；

1. 本科及以上学历，计算机、网络安全、信息安全等相关专业，3年及以上应用安全/渗透测试工作经验，熟悉Web漏洞原理、利用及修复方案，可独立完成渗透测试工作； 2. 熟悉SDL安全开发流程，有企业内部SDL落地、安全左移实战经验； 3. 掌握Python、JAVA、GO其中一种开发与语言，具备黑盒自动化安全脚本/工具开发、二次开发及运维能力； 4. 熟悉主流白盒代码扫描工具，可独立完成告警研判，能读懂基础业务代码； 5. 熟练使用Burp Suite、AWVS等常规安全测试工具，了解数据安全分级分类、数据合规、个人信息保护相关规范，具备良好的跨部门沟通和文档输出能力。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against jtexpress/index's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on jtexpress/index's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    jtexpress/index's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.