Cooper Energy

Job Responsibilities

• Lead design and implementation of enterprise-level application security architecture solutions, ensuring application and data confidentiality, integrity, and availability.

• Develop, maintain and promote the implementation of application security policies, standards and technical guidelines, to support business system security compliance requirements.

• Provide safety coding training and technical guidance, enhance the R&D team's safety awareness and implementation ability.

• Perform application system security evaluation, source code review, vulnerability analysis and risk assessment, and propose specific repair suggestions and mitigation measures.

• Evaluate, introduce and deploy advanced application security tools and technologies (such as SAST, DAST, IAST, WAF, etc.), and continuously optimize protection capabilities.

• Closely monitor emerging security threats and attack trends, and lead the development of response strategies and mitigation solutions.

• Participate in information security incidents and provide professional technical support and root cause analysis.

• Collaborate with other departments to ensure that new and old application systems meet security standards during the design, development, deployment and maintenance phases.

• Establish and maintain complete application security technical documents, architecture diagrams, and operation guides.

Work requirements

• Holding a bachelor's degree in Computer Science, Information Security or related fields, with 5 to 10 years of relevant work experience, at least 7 years of which are focused on applied security or secure software development.

• In-depth understanding of application security principles and common vulnerability mechanisms (such as OWASP Top Ten), mastery of defense technologies and best practices.

• Have rich experience in secure programming and security testing, and can propose effective protection schemes for different technology stacks.

• Familiar with at least one mainstream programming language such as Java, C#, Python or JavaScript, and understand its secure development mode.

• Proficient in the use of static and dynamic application security testing tools (SAST/DAST), interactive application security testing tools (IAST), and web application firewalls (WAF) technologies,

• Have excellent analysis and judgment and problem-solving skills, be able to quickly locate complex security issues and propose feasible solutions.

• Excellent communication and collaboration skills, able to effectively coordinate and cooperate with developers, testers, operations and management layers.

• Applicants with CISSP, CSSLP, CEH, etc. information security certifications are given priority.

• Fluent in Cantonese, English, and Mandarin for written and oral communication.

• Accept Hong Kong permanent residents, high-end talent pass (High Talent Pass), excellent talent entry plan (Excellent Talent Pass), non-local graduate Hong Kong / return employment arrangement (IANG), dependent entry visa or other legal work permit application.

Benefits

• Thirteen months' salary

• Flexible work schedule

• Five-day work week

• Holiday for marriage

• Additional maternity leave

• Additional maternity leave

• Banking fraud

• 14 days of annual leave