Responsibilities

• Review SAST and DAST result and work with DEV team for remediation
• Perform Penetration testing when needs
• Work with DEV team to implement the security control in software development lifecycle
• Provide technical support for product team.

Requirements

• Should have web application development experience with Java or .Net or PHP.
• Understand the common encryption algorithm.
• Familiar with HTTP, SSL protocol.
• Familiar with popular security vulnerabilities with web application and related solutions. Such as XSS, SQL injection, OWASP certification is preferred.
• Understand software development lifecycle, and experiences with security integration
• Good communication skill.
• Good English Skills in Verbal and Written