安全研发工程师（黑盒扫描方向）-安全与风控
Core
Build and iterate a cloud product automated black-box scanning system, developing vulnerability POCs, plugins, and scanning strategies to cover cloud assets and reduce false positives/negatives.
Role type
Security R&D Engineer (Black-box Scanning)
Builds
Automated black-box scanning infrastructure, vulnerability POCs, and scanning plugins for cloud products, APIs, and cloud-native environments.
Domain
Cloud Security / Vulnerability Management
Required skills
Python/Go/Java, vulnerability POC development, OWASP Top10 knowledge, cloud security fundamentals, black-box scanning tool customization
Preferred skills
Cloud security attack/defense experience, secondary development of scanning tools like AWVS/Xray/Nuclei
Responsibilities
Develop vulnerability POCs and validate them to optimize scanning rules; Create and adapt plugins for specific cloud scenarios; Define scanning strategies to achieve full coverage of core cloud assets; Operate scanning results to identify common issues and drive remediation.
Seniority
Mid-level, hands-on IC
