Kong - Senior Security Engineer – Vulnerability Management

Senior Security Engineer – Vulnerability Management

Shanghai

Engineering – Security /

Full-time /

On-site

Are you located in Bangalore or willing to relocate to Bangalore within 2 months of employment?✱

Are you legally authorized to work in the country where this position will be worked?✱
Do you now, or will you in the future, require sponsorship?✱
If so, what type of visa are you currently on and when does it expire?

Tell us about a time when you identified and responded to a zero-day vulnerability in a production system. What was your approach to investigation, mitigation, and long-term remediation?✱
We're looking to enhance our fuzzing capabilities. Tell us about your experience implementing fuzz testing in a production environment. What types of vulnerabilities were you able to uncover, and how did you integrate the findings into your development workflow?✱
Describe a situation where manual security testing revealed vulnerabilities that automated tools missed. What was your methodology, and how did you use this experience to improve your automated testing capabilities?✱
Describe a time when you conducted security testing of network protocols or proxy systems. What tools did you use for packet manipulation, what vulnerabilities were you targeting, and what were your findings?✱
Tell us about your experience using debuggers for vulnerability research. What tools and techniques do you employ when manually investigating potential security flaws in an application?✱