Senior/Expert Penetration Engineer

Job Description Use security tools to scan websites/api/servers for vulnerabilities, and manually confirm vulnerabilities that cannot be reproduced with tools.Analyze the exploited vulnerabilities and give suggestions for repairing them.Emergency response to web security incidents and recurring attack routines.Qualifications Proficiency in at least 2 programming languages.Have their own set of tools and methods for early information collection.Proficiency in using Burp Suite, Nmap, SQLMap, and other tools to scan and exploit vulnerabilities.Familiar with the HTTP protocol, including the HTTP header part, and able to explain its meaning. Familiar with the DNS protocol and proficient in using tools to analyze the DNS resolution process.Familiar with common web vulnerabilities, such as SQL injection, XSS attack, command injection, CSRF attack, upload vulnerability, parsing vulnerability, etc.It is preferable to be familiar with popular suites or frameworks commonly used in front-end development, such as Webpack, Vue.js, React.js, Ant, Gulp, etc.Those with web full stack development experience or DevOps experience can be interviewed for extra points.Bonus points for interviews with static reverse engineering, dynamic debugging, and an in-depth understanding of PE structure.Bonus points for deep experience in Windows domain penetration.
#J-18808-Ljbffr