Application security is a very important part in LINE’s service development. Application security engineers are in charge of the security design of LINE services. They are involved in service architecture design, security module development, and application security review. Application security engineers must be able to perform application security review based on both whitebox and blackbox security testing.
They are also in charge of compiling secure development guidelines for R&D departments, in order to ensure our services are secure and reliable. System security architecture, secure code review, and penetration testing skills are mandatory for this position.
In addition, the application security team is responsible for research, development, and deployment of new security technologies, such as machine learning, biometric authentication, blockchain technologies, IoT security, and encryption module design. Security engineers can do research related to their respective projects or choose to work with the global security team on universally applicable technologies.
Perform risk assessment for family services
1. Perform blackbox and whitebox security assessment for family services.
2. Review technical design and provide suggestions to improve the system security.
3. Co-work with global teams to deal with the application security issues.
1. Analyze account abusing with global anti-abusing team.
2. Deal with service abusing cases.
3. Help to improve the anti-abusing system.
4. Candidate have to perform at least one of the major jobs mentioned above.
Required Skills and Qualifications
1.Must be familiar with both attack and protection best practices of OWASP TOP 10.
2. Must be familiar with Web service security and authentication protocols, such as, OAuth 2.0, WebAuth SAML, and TLS.
3. Must be familiar with contemporary encryption technologies, protocols, and algorithms.
4. Should be able to write and review Java and Python applications.
5. Fluent in English.
Preferred Skills and Qualifications
1. Familiar data analysis tools, such as ELK and Hadoop.
2. Familiar with modern vulnerability scan tools, such AppScan, WebInspect, BurpSuite and etc.
3. Familiar about code review tools, such as Fortify and CheckMarx.
4. Japanese or Korean language skill.