Web安全工程师（AI赋能）

岗位职责： 对 Web 系统的漏洞挖掘，对潜在安全问题提供解决方案，并对修复进行跟进、验证。 对 Web 应用系统项目，经常安全评审，包括：设计评审、威胁建模、代码审计、上线前安全检查、自动化漏洞扫描、完善上线流程等。 参与 AI 赋能 Web 应用安全评估，识别减轻AI模型接口、数据交互及推理过程中的潜在安全风险。 与 AI 工程团队协作，制定并实施针对 AI 功能的安全控制策略，确保AI系统的稳健性与数据完整性。 任职要求： 本科及以上学历，信息安全、人工智能、计算机等相关专业，5年以上信息安全，或者3年以上AI安全相关工作经验。 熟悉安全工作及 SDL 流程，对 Web 安全测试和代码审计有深入理解，并有丰富实操经验。 熟悉常见 Web 安全漏洞分析与防范，包括 SQL 注入、XSS、越权等 OWASP Top 10 安全风险及对应解决方案。 熟悉常见黑客攻击手法、原理、防护与绕过方法，包括但不限于各种注入、跨站、文件包含、命令执行、越权、WAF绕过等。 熟悉 Java、Python 语言，了解常见的 Web 应用框架和安全框架，具备代码审计能力及定位问题根因的能力。 熟悉 AI 辅助工具（如代码生成、漏洞检测或安全分析类AI工具）的使用，能够利用 AI 提升安全测试与代码漏洞分析的效率。 具备较强分析、解决问题和沟通能力，能够与跨职能团队和利益相关者进行有效合作。 具备良好的英文文档阅读和书写能力，能够进行英文口语沟通。 加分项： 有 AI 赋能应用（如大模型应用、AI Agent应用等）的安全测试或攻防经验。 熟悉 Prompt Injection、Model Poisoning、数据投毒、间接注入等 AI 安全攻击技术。 有开发或使用 AI 驱动的安全工具（如 AI 代码审计工具、智能漏洞扫描器）的经验。 拥有 OSCP、OSWE、CISSP 等安全认证，或在CVE、SRC 平台有漏洞提交记录。 有批判性思维，乐于接触和学习新鲜事物；热爱信息安全行业，有大局观，有团队精神，有担当。 Ways of Working Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting. Benefits As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information. About Us Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars. We’re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment. Our Commitment​ At Zoom, we believe great work happens when people feel supported and empowered. We’re committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know—we’re here to support you at every step. If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed. Our interviews are supported by BrightHire, a tool that helps us create a consistent and thoughtful interview experience and may include recordings. Please refer to our candidate privacy statement for more information of how we use your data.