Application 安全 Researcher

Focused on SAST, IAST, and practical open-source security tooling.

I work on application security engineering and security research, building practical tooling for static analysis, interactive testing, and secure development workflows.

• Static application security testing for large codebases
• Runtime instrumentation and interactive analysis
• Developer-facing security automation
• Open-source tooling for security review and experimentation

• Role: 安全 researcher and tool builder
• Primary Domains: SAST, IAST, AppSec engineering
• Preferred Stacks: Java, Kotlin, Python, Go, Rust, TypeScript
• Environment: Linux, Kubernetes, AWS, GCP