岗位职责：

1. 对Web系统的漏洞挖掘，对潜在安全问题提供解决方案，并对修复进行跟进、验证.

2. 对软件项目的安全评审（包括：设计评审，代码评审，上线前安全检查、自动化漏洞扫描、完善上线流程等）.

任职要求：

1. 本科及以上学历，信息安全、计算机等相关专业，3年以上安全相关工作经验；

2. 熟悉Web安全工作，及SDL流程，对Web安全测试有自己的理解；

3. 熟悉Java语言，了解常见的web框架和安全框架，具备一定代码审计能力，以及定位问题root cause能力.

4. 熟悉自动化扫描结果的分析，具备定位有效报告的能力.

5. 熟悉常见web安全漏洞分析与防范，包括SQL注入、XSS、越权等OWASP10安全风险及对应的解决方案.

6. 熟悉常见黑客攻击手法、原理、防护、绕过方法，包括但不限于：各种注入/跨站/文件包含/命令执行/越权/WAF绕过等.

7. 具备良好的英文文档阅读和书写能力，能够进行简单的口语沟通.

Ways of Working
Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.

Benefits
As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information.

About Us
Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.
We’re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Here, you’ll work across teams to deliver impactful projects that are changing the way people communicate and enjoy opportunities to advance your career in a diverse, inclusive environment.

Our Commitment​
We believe that the unique contributions of all Zoomies is the driver of our success. To make sure that our products and culture continue to incorporate everyone's perspectives and experience we never discriminate on the basis of race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. Zoom is proud to be an equal opportunity workplace and is an affirmative action employer. All your information will be kept confidential according to EEO guidelines.

We welcome people of different backgrounds, experiences, abilities and perspectives including qualified applicants with arrest and conviction records and any qualified applicants requiring reasonable accommodations in accordance with the law. If you need any assistance or accommodations due to a medical condition, or if you need assistance accessing our website or completing the application process, please let us know by emailing us at careers@zoom.us.