t*g
2 楼
想借鉴一下。
p*d
3 楼
自己顶一下。 先谢谢了！
h*a
4 楼
有这种文章的人不会拿出来分享的，早发财了
【在 t*******g 的大作中提到】
: 想借鉴一下。
【在 t*******g 的大作中提到】
: 想借鉴一下。
p*2
5 楼
上次yammer找我做这个 没去面
【在 p*****d 的大作中提到】
: 如题。 做这个前途如何？比起developer？
: 多谢！
【在 p*****d 的大作中提到】
: 如题。 做这个前途如何？比起developer？
: 多谢！
c*t
6 楼
I am happy to work in the industry > 12 years.
And it is doing quite good recently, I have a lot to say about this as a
career.
It is a niche.
And you really can benefit a lot after a few years. I would say, thinking
beyond just getting some income as individual engineer, this sector is
promising.
【在 p*****d 的大作中提到】
: 如题。 做这个前途如何？比起developer？
: 多谢！
And it is doing quite good recently, I have a lot to say about this as a
career.
It is a niche.
And you really can benefit a lot after a few years. I would say, thinking
beyond just getting some income as individual engineer, this sector is
promising.
【在 p*****d 的大作中提到】
: 如题。 做这个前途如何？比起developer？
: 多谢！
c*t
7 楼
and if you want to find a position or just things to do in this field, talk
to me.
【在 p*****d 的大作中提到】
: 如题。 做这个前途如何？比起developer？
: 多谢！
to me.
【在 p*****d 的大作中提到】
: 如题。 做这个前途如何？比起developer？
: 多谢！
p*2
8 楼
大牛说说都需要什么knowledge。
【在 c********t 的大作中提到】
: I am happy to work in the industry > 12 years.
: And it is doing quite good recently, I have a lot to say about this as a
: career.
: It is a niche.
: And you really can benefit a lot after a few years. I would say, thinking
: beyond just getting some income as individual engineer, this sector is
: promising.
c*t
9 楼
for smart cookies like you , already over qualified.
Seriously, it is an industry seems like so a bit high bar to enter.
But that's fake impression.
【在 p*****2 的大作中提到】
:
: 大牛说说都需要什么knowledge。
Seriously, it is an industry seems like so a bit high bar to enter.
But that's fake impression.
【在 p*****2 的大作中提到】
:
: 大牛说说都需要什么knowledge。
a*z
10 楼
co-ask. what are the first steps for changing one's career from a software
engineer to an Application Security Engineer?
Thanks!
【在 p*****2 的大作中提到】
:
: 大牛说说都需要什么knowledge。
engineer to an Application Security Engineer?
Thanks!
【在 p*****2 的大作中提到】
:
: 大牛说说都需要什么knowledge。
p*d
11 楼
谢谢你的回复！
能否展开讲讲？例如与system/network administrator的区别。从job market看似乎不
少公司招这个职位。
【在 c********t 的大作中提到】
: I am happy to work in the industry > 12 years.
: And it is doing quite good recently, I have a lot to say about this as a
: career.
: It is a niche.
: And you really can benefit a lot after a few years. I would say, thinking
: beyond just getting some income as individual engineer, this sector is
: promising.
能否展开讲讲？例如与system/network administrator的区别。从job market看似乎不
少公司招这个职位。
【在 c********t 的大作中提到】
: I am happy to work in the industry > 12 years.
: And it is doing quite good recently, I have a lot to say about this as a
: career.
: It is a niche.
: And you really can benefit a lot after a few years. I would say, thinking
: beyond just getting some income as individual engineer, this sector is
: promising.
p*d
12 楼
如果你不介意，可否展开讲讲为何未去？
【在 p*****2 的大作中提到】
: 上次yammer找我做这个 没去面
【在 p*****2 的大作中提到】
: 上次yammer找我做这个 没去面
W*g
13 楼
看你ID还是适合做开发吧
【在 p*****d 的大作中提到】
: 谢谢你的回复！
: 能否展开讲讲？例如与system/network administrator的区别。从job market看似乎不
: 少公司招这个职位。
【在 p*****d 的大作中提到】
: 谢谢你的回复！
: 能否展开讲讲？例如与system/network administrator的区别。从job market看似乎不
: 少公司招这个职位。
p*2
14 楼
刚被微软收购
【在 p*****d 的大作中提到】
: 如果你不介意，可否展开讲讲为何未去？
c*t
15 楼
yeah, also Yammer still have an application security position (with ties to
APAC too).
【在 p*****2 的大作中提到】
:
: 刚被微软收购
APAC too).
【在 p*****2 的大作中提到】
:
: 刚被微软收购
a*3
16 楼
同问，我看一个招聘广告上说要熟C++和TCP/IP协议。
【在 p*****2 的大作中提到】
:
: 刚被微软收购
【在 p*****2 的大作中提到】
:
: 刚被微软收购
P*b
17 楼
applicaiton security 有那么长时间的时间了？
我还以为只是近几年的事情呢
【在 p*****d 的大作中提到】
: 谢谢你的回复！
: 能否展开讲讲？例如与system/network administrator的区别。从job market看似乎不
: 少公司招这个职位。
我还以为只是近几年的事情呢
【在 p*****d 的大作中提到】
: 谢谢你的回复！
: 能否展开讲讲？例如与system/network administrator的区别。从job market看似乎不
: 少公司招这个职位。
f*g
18 楼
I am working at application Security industry for a year, and I am still a
newbie:-) But I love to share my $0.02.
Knowledge and Skill sets:
If you are working in Web Security:
* Web technology stack, from the most basic principle like same domain
origin policy to latest technology like PostMessage, WebSocket etc.
* OWASP Top 10 Web Security Vulnerabilities
* Applied cryto. How to generate PRNG? How to store customers' password?
what is the crypto algorithms/libraries you are going to suggest developers
to use?
* TCP/IP protocol stack
* SSL protocol and web SSO procotol, such as openid, saml, oauth etc.
Besides technical skills list here, you have to be very passionate about
security and hacking , since this position requires a lot self-learning and
research :-)
newbie:-) But I love to share my $0.02.
Knowledge and Skill sets:
If you are working in Web Security:
* Web technology stack, from the most basic principle like same domain
origin policy to latest technology like PostMessage, WebSocket etc.
* OWASP Top 10 Web Security Vulnerabilities
* Applied cryto. How to generate PRNG? How to store customers' password?
what is the crypto algorithms/libraries you are going to suggest developers
to use?
* TCP/IP protocol stack
* SSL protocol and web SSO procotol, such as openid, saml, oauth etc.
Besides technical skills list here, you have to be very passionate about
security and hacking , since this position requires a lot self-learning and
research :-)
相关阅读
我出去玩回来了（29,36照片）找Co-ops应该注意些什么？谁家里有 eshield radiant barrier，效果如何买房很纠结啊。。这里的话唠可能是春药吃多了。老中一般在几年内付清房子贷款？Bank of America 付信用卡付不了，求助 (转载)利率看到一个很惊艳的妹子买房台阶问题房子的地基30万贷款30年，利息3.25-3。375%， 高么？包子有奖竞猜：银行什么时候最后批准可以CLOSE换expansion tank1X Lowe's Coupon 10 off 50, Expire on Jan 28, 2013, （5个包子起）关于rekeyRefinance CostValspar免费8oz油漆作为半个哈尔滨人，听到大家整天“丢”“找丢”的，觉得很不好意思买老房子要注意什么？