第5篇 安全应用工程师岗位职责

应用安全测试工程师 oracle甲骨文 甲骨文(中国)软件系统有限公司,oracle甲骨文,甲骨文,甲骨文(中国)软件系统,甲骨文中国,甲骨文北京 2年以上软件测试工作经验,熟悉应用安全测试owasp,熟悉linux shell/ python,英语口语流利,base南京九龙湖。

department description

oracle is moving aggressively to offer customers a full range of cloud solutions including sales force automation, human resources, talent management, social networking, databases and java as part of the oracle cloud.

oracle’s strategy is to offer a broad portfolio of software and hardware products and services to enable public, private and hybrid clouds, enabling customers to choose the right approach for them. unlike competitors with narrow views of the cloud, oracle provides the broadest, most complete, and integrated cloud offerings in the industry.

responsibilities

as cloud security testing team, we are responsible for breaking things, in depth knowledge of cloud application security both web and mobile.

 perform cloud application security assessment, threat models, code reviews, etc.

 perform application penetration and security functional testing

 develop automation and processes to identify security flaws in code with java, python, perl

 develop mobile automation for iphone, android, and blackberry mobile applications

 report bugs and track for a resolution

 work with global development teams to build testing solutions and troubleshoot security issues in order to deliver product in high quality

requirements

 bs/ms in computer science, information security or related field

 2+ years of developing web-based application (frontend preferred)

 solid object-orientated programming skills, especially in java is a plus

 2+ years of experience in an application security

 strong background and knowledge in the application security domain (owasp, etc) secure coding, penetration testing and mobile platform and applications

 familiar with code review tool (i.e. fortify, etc.)

 knowledge of linux, javascript, python, perl, shell, xml, sql, and oracle database

 self-motivated with strong capability of fast learning

 good team player and good written and verbal communication skills

 previous software testing and automation experience is desired professional certifications a plus: ceh, cissp

 familiarity with oracle technologies is a plus (fusion apps, fusion middleware, oracle database...)