安全应用工程师岗位职责

应用安全测试工程师Oracle甲骨文甲骨文(中国)软件系统有限公司,Oracle甲骨文,甲骨文,甲骨文(中国)软件系统,甲骨文中国,甲骨文北京2年以上软件测试工作经验,熟悉应用安全测试OWASP,熟悉LinuxShell/Python,英语口语流利,base南京九龙湖。

DepartmentDescription

OracleismovingaggressivelytooffercustomersafullrangeofCloudSolutionsincludingsalesforceautomation,humanresources,talentmanagement,socialnetworking,databasesandJavaaspartoftheOracleCloud.

Oracle’sstrategyistoofferabroadportfolioofsoftwareandhardwareproductsandservicestoenablepublic,privateandhybridclouds,enablingcustomerstochoosetherightapproachforthem.Unlikecompetitorswithnarrowviewsofthecloud,Oracleprovidesthebroadest,mostcomplete,andintegratedcloudofferingsintheindustry.

Responsibilities

Ascloudsecuritytestingteam,weareresponsibleforbreakingthings,indepthknowledgeofcloudapplicationsecuritybothwebandmobile.

Performcloudapplicationsecurityassessment,threatmodels,codereviews,etc.

Performapplicationpenetrationandsecurityfunctionaltesting

DevelopautomationandprocessestoidentifysecurityflawsincodewithJava,Python,Perl

DevelopmobileautomationforiPhone,Android,andBlackBerrymobileapplications

Reportbugsandtrackforaresolution

Workwithglobaldevelopmentteamstobuildtestingsolutionsandtroubleshootsecurityissuesinordertodeliverproductinhighquality

Requirements

BS/MSinComputerScience,InformationSecurityorrelatedfield

2+yearsofdevelopingweb-basedapplication(Frontendpreferred)

Solidobject-orientatedprogrammingskills,especiallyinJavaisaplus

2+yearsofexperienceinanapplicationsecurity

Strongbackgroundandknowledgeintheapplicationsecuritydomain(OWASP,etc)Securecoding,penetrationtestingandmobileplatformandapplications

Familiarwithcodereviewtool(i.e.Fortify,etc.)

KnowledgeofLinux,JavaScript,Python,Perl,Shell,XML,SQL,andOracleDatabase

Self-motivatedwithstrongcapabilityoffastlearning

Goodteamplayerandgoodwrittenandverbalcommunicationskills

PrevioussoftwaretestingandautomationexperienceisdesiredProfessionalcertificationsaplus:CEH,CISSP

FamiliaritywithOracletechnologiesisaplus(FusionApps,FusionMiddleware,OracleDatabase...)