Principal Security Development Engineer
Job responsibilities
Participate in the research and development of relevant systems and platforms for the company's security system, covering areas such as data security, sensitive information identification and desensitization, and secure operation platforms, continuously improving the company's overall security protection capabilities.
Design and implement security policies and detection logic to support the company's compliance and security needs.
Deeply understand the business system architecture, identify potential security risks, and propose feasible technical solutions.
Participate in emergency response and review of security incidents, promote continuous improvement of security capabilities and platform construction.
Work closely with infrastructure, group risk control and other departments to promote the implementation of security capabilities throughout the company.
Job requirements
Bachelor's degree or above in computer-related majors, with more than 3 years of research and development experience, and those with security research and development experience are preferred.
Proficient in Golang, with Java/Python and other multi-language development capabilities, with a solid foundation in data structures, able to support high-performance, high-reliability system development;
Familiar with common security issues (such as XSS, SQL injection, permission bypass, data leakage) and corresponding protection mechanisms.
Familiar with common security frameworks and Middleware, with good system design skills and engineering thinking.
Possess strong communication and promotion skills, able to independently take charge of projects and collaborate with XFN.
Bonus points
Experience in security research and development of large-scale high-concurrency systems.
Participated in data security, privacy compliance, audit system and other related platform construction;
Have contributed to open source security projects, submitted CVE experiences, or won security competitions.
Familiar with Cloud Native security (Kubernetes, microservice structure, zero trust) related technologies.