Duties include:
1. Responsible for developing Devsecops solutions and processes, integrating security into the business development process;
2. Responsible for the construction of the Devsecops system, promote the system to be implemented in the code writing, code submission, business launch, etc. Ensure overall coverage;
3. Responsible for following up on the safety review of ongoing projects, providing professional safety advice, and driving safety improvement work to be implemented;
4. Responsible for conducting safety training for R&D personnel, improving their safety awareness and safety skills;
5. Responsible for the construction and operation of DevSecOps security tools such as white box, black box, gray box, component security, and image security, thereby improving the overall defect detection rate and defect repair rate.
7. Responsible for AI business, car cloud business, commercial field, etc. SDLC project review, requirement review, ensuring business system security and stability;
Position requirements
1. Familiar with security and development best practices, such as OWASP Top 10, SDLC, CI/CD, etc., and able to integrate these practices into development and operation processes;
2. Have code review and security testing capabilities, be able to evaluate the security of applications and code libraries, and provide feedback and suggestions;
3. Familiar with the principles and use of white-box, black-box, gray-box, SCA, image scanning, etc. tools, and be able to operate them fluently to enhance the detection ability of the tools;
4. Familiar with Java, Golang, Node, etc., language code auditing;
4. Have good coordination and communication skills, be able to effectively communicate and collaborate with development, operations, security and other teams to ensure good execution of security practices.
5. Have good stress resistance and responsibility.
6. Familiar with AI security, those who have AI security practical experience are preferred;
7. Have automotive industry work experience, familiar with related safety issues in car cloud;
