Some students often ask Chen:
In network security need to travel frequently? In addition, software developers can switch whether network security?
Take a quick answer below:
The first question, do I need to travel frequently? Detailed analysis of this particular situation.
The second question, do developers can turn ***? Very improved.
Why =>
First, the network security engineers need to travel? If you are the next entry is Party units , such as government, state-owned enterprises, taxation, amount, such as the Internet, basically this is the scope of jobs for their own products or business systems security testing, software development post with this case the situation is almost the same, you can all go to work in their own units, without having to go out. Note: Party, a similar job offers and job content, and Web safety engineers, safety engineers move, business security engineers.
Conversely, if you are the next entry is 360, Cian letter, Talent, Arnhem, deeply convinced of the safety and other manufacturers, or Ernst & Young, Price Waterhouse consulting firm, or start-up companies and other small and medium sized safe, simple terms, B units . Well, most of the time you will not be in the company office or the project site is the customer, either on a business trip on the way.
In addition, software developers can turn to do network security? Of course improvement.
Even so to speak, software development, network security has always been an essential skill items , do not "switch" statement exists, so-called " do not understand the development of the programmer is not a good white hat *** ."
Both positions have a lot of skills are overlapping, for example, Network Security Engineer (Web Security) recruiting skills needs generally =>
-
Pre-knowledge: at least familiar with a language, develop basic website, Linux foundation
-
Security theory: HTTP protocol, OWASP TOP 10, PETS, ISO 27001 ...
-
Backend security: SQL injection, file upload, Webshell (***), the file contains, command execution ...
-
Front-end security: XSS Cross Site Scripting ***, CSRF CSRF ...
-
Security Products: Web Vulnerability Scanner (Burp / WVS / Appscan), WAF (Web Application Firewall), IDS / IPS (Web *** defense), Web hosts protection ...
……
And you have experience in software development, the great probability will involve Web development, at least come into contact with Java / Spring, Python / Django / Flask, PHP / Thinkphp such as any of the technology stack, the network security (Web direction) involved HTTP agreement, front-end security (XSS vulnerabilities), back-end security (Webshell), secure database (SQL injection vulnerability), etc., it is certainly easy for you, even more than not engaged in the development of the post, the more they get to know on the code level principle.
In this paper the formal end of it ~ ~ ~