腾讯WAF高级后台研发工程师
社招全职5年以上基础安全-三部技术地点:深圳状态:招聘
任职要求
1.计算机科学、网络安全或相关专业本科及以上学历,3年以上后台开发经验; 2.扎实的计算机基础:精通数据结构/算法,熟悉Linux环境及网络编程(TCP/IP/HTTP/HTTPS); 3.至少精通一门后台语言(Go/C++/Python),有高并发、分布式系统开发经验; 4.熟悉Web安全原理,了解常见攻防手段(如OWASP Top 10)及防御方案; 5.熟悉正则表达式、规则引擎(如YARA)、协议解析等技术细节; 6.具备良好的系统设计能力,能独立完成模块从设计到落地的全流程。 加分项 1.熟悉Rust语言,有Rust高性能网络服务开发经验; 2.有WAF、IDS/IPS、DDoS防护等网络安全产品开发经验; 3.熟悉Nginx/OpenResty模块开发或Lua脚本扩展; 4.了解机器学习在安全领域的应用(如异常流量检测); 5.有开源网络安全项目贡献者优先; 6.在同等条件下,通过腾讯云认证或取得同等资格认证的候选人,我们会优先考虑。
工作职责
1.负责WAF系统核心功能的设计、开发和优化,包括流量接入、配置下发、大流量安全策略处理等模块; 2.优化系统性能,解决高并发、低延迟场景下的技术难题(如百万级QPS流量处理); 3.参与WAF与各种云原生产品集成方案设计与落地; 4.研究新型攻防模式,持续改进防御算法与规则匹配效率; 5.编写技术文档,推动团队代码规范与系统可维护性提升; 6.该岗位base地可open深圳/北京/杭州。
包括英文材料
学历+
数据结构+
https://www.youtube.com/watch?v=8hly31xKli0
In this course you will learn about algorithms and data structures, two of the fundamental topics in computer science.
https://www.youtube.com/watch?v=B31LgI4Y4DQ
Learn about data structures in this comprehensive course. We will be implementing these data structures in C or C++.
https://www.youtube.com/watch?v=CBYHwZcbD-s
Data Structures and Algorithms full course tutorial java
算法+
https://roadmap.sh/datastructures-and-algorithms
Step by step guide to learn Data Structures and Algorithms in 2025
https://www.hellointerview.com/learn/code
A visual guide to the most important patterns and approaches for the coding interview.
https://www.w3schools.com/dsa/
Linux+
https://ryanstutorials.net/linuxtutorial/
Ok, so you want to learn how to use the Bash command line interface (terminal) on Unix/Linux.
https://ubuntu.com/tutorials/command-line-for-beginners
The Linux command line is a text interface to your computer.
https://www.youtube.com/watch?v=6WatcfENsOU
In this Linux crash course, you will learn the fundamental skills and tools you need to become a proficient Linux system administrator.
https://www.youtube.com/watch?v=v392lEyM29A
Never fear the command line again, make it fear you.
https://www.youtube.com/watch?v=ZtqBQ68cfJc
网络编程+
https://www.youtube.com/watch?v=2HrYIl6GpYg
I will make a simple HTTP web server with the C Programming Language.
https://www.youtube.com/watch?v=8z6okCgdREo
This tutorial is for Gophers who have written a command line or an API application, but have little to no experience in lower-level concepts like reading and writing to sockets, working with channels, and managing multiple goroutines.
https://www.youtube.com/watch?v=bdIiTxtMaKA&list=PL9IEJIKnBJjH_zM5LnovnoaKlXML5qh17
https://www.youtube.com/watch?v=bzja9fQWzdA
Implement the ubiquitous TCP protocol that underlies much of the traffic on the internet!
[英文] 📺Network Programming with Python Course (build a port scanner, mailing client, chat room, DDOS)
https://www.youtube.com/watch?v=FGdiSJakIS4
Learn network programming in Python by building four projects. You will learn to build a mailing client, a DDOS script, a port scanner, and a TCP Chat Room.
https://www.youtube.com/watch?v=gntyAFoZp-E
https://www.youtube.com/watch?v=JiuouCJQzSQ
Explore the fundamentals of networking in Rust by building a simple TCP server.
https://www.youtube.com/watch?v=JRTLSxGf_6w
https://www.youtube.com/watch?v=sFizpxHkIlI
In this video we'll cover SOCKET PROGRAMMING in JAVA.
https://www.youtube.com/watch?v=sXW_sNGvqcU
TCP/IP+
[英文] What is TCP/IP?
https://www.techtarget.com/searchnetworking/definition/TCP-IP
TCP/IP stands for Transmission Control Protocol/Internet Protocol and is a suite of communication protocols used to interconnect network devices on the internet.
HTTP+
https://developer.mozilla.org/zh-CN/docs/Web/HTTP
超文本传输协议(HTTP)是一个用于传输超媒体文档(例如 HTML)的应用层协议。它是为 Web 浏览器与 Web 服务器之间的通信而设计的,但也可以用于其他目的。
Go+
https://www.youtube.com/watch?v=8uiZC0l4Ajw
学习Golang的完整教程!从开始到结束不到一个小时,包括如何在Go中构建API的完整演示。没有多余的内容,只有你需要知道的知识。
C+++
https://www.learncpp.com/
LearnCpp.com is a free website devoted to teaching you how to program in modern C++.
https://www.youtube.com/watch?v=ZzaPdXTrSb8
Python+
https://liaoxuefeng.com/books/python/introduction/index.html
中文,免费,零起点,完整示例,基于最新的Python 3版本。
https://www.learnpython.org/
a free interactive Python tutorial for people who want to learn Python, fast.
https://www.youtube.com/watch?v=K5KVEU3aaeQ
Master Python from scratch 🚀 No fluff—just clear, practical coding skills to kickstart your journey!
https://www.youtube.com/watch?v=rfscVS0vtbw
This course will give you a full introduction into all of the core concepts in python.
高并发+
https://www.baeldung.com/concurrency-principles-patterns
In this tutorial, we’ll discuss some of the design principles and patterns that have been established over time to build highly concurrent applications.
https://www.baeldung.com/java-concurrency
Handling concurrency in an application can be a tricky process with many potential pitfalls. A solid grasp of the fundamentals will go a long way to help minimize these issues.
https://www.oreilly.com/library/view/concurrency-in-go/9781491941294/
You’ll understand how Go chooses to model concurrency, what issues arise from this model, and how you can compose primitives within this model to solve problems.
https://www.oreilly.com/library/view/modern-concurrency-in/9781098165406/
With this book, you'll explore the transformative world of Java 21's key feature: virtual threads.
https://www.youtube.com/watch?v=qyM8Pi1KiiM
https://www.youtube.com/watch?v=wEsPL50Uiyo
分布式系统+
https://www.distributedsystemscourse.com/
The home page of a free online class in distributed systems.
https://www.youtube.com/watch?v=7VbL89mKK3M&list=PLOE1GTZ5ouRPbpTnrZ3Wqjamfwn_Q5Y9A
Web+
https://web.dev/learn
Explore our growing collection of courses on key web design and development subjects.
系统设计+
https://roadmap.sh/system-design
Everything you need to know about designing large scale systems.
https://www.youtube.com/watch?v=F2FmTdLtb_4
This complete system design tutorial covers scalability, reliability, data handling, and high-level architecture with clear explanations, real-world examples, and practical strategies.
Rust+
https://www.youtube.com/watch?v=BpPEoZW5IiY
In this comprehensive Rust course for beginners, you will learn about the core concepts of the language and underlying mechanisms in theory.
https://www.youtube.com/watch?v=lzKeecy4OmQ
Full Rust 101 Crash Course for beginners.
https://www.youtube.com/watch?v=rQ_J9WH6CGk
Nginx+
[英文] Beginner’s Guide
https://nginx.org/en/docs/beginners_guide.html
This guide gives a basic introduction to nginx and describes some simple tasks that can be done with it.
https://www.youtube.com/watch?v=9t9Mp0BGnyI
NGINX is open-source web server software used for reverse proxy, load balancing, and caching. It's important to understand, especially if you are a backend developer.
Lua+
https://www.lua.org/pil/contents.html
This is the online version of the first edition of the book Programming in Lua, a detailed and authoritative introduction to all aspects of Lua programming written by Lua's chief architect.
脚本+
[英文] Scripting language
https://en.wikipedia.org/wiki/Scripting_language
https://zhuanlan.zhihu.com/p/571097954
一个脚本通常是解释执行而非编译。脚本语言通常都有简单、易学、易用的特性,目的就是希望能让程序员快速完成程序的编写工作。
机器学习+
https://www.youtube.com/watch?v=0oyDqO8PjIg
Learn about machine learning and AI with this comprehensive 11-hour course from @LunarTech_ai.
https://www.youtube.com/watch?v=i_LwzRVP7bg
Learn Machine Learning in a way that is accessible to absolute beginners.
https://www.youtube.com/watch?v=NWONeJKn6kc
Learn the theory and practical application of machine learning concepts in this comprehensive course for beginners.
https://www.youtube.com/watch?v=PcbuKRNtCUc
Learn about all the most important concepts and terms related to machine learning and AI.
后端开发+
https://www.youtube.com/watch?v=tN6oJu2DqCM&list=PLWKjhJtqVAbn21gs5UnLhCQ82f923WCgM
Learn what technologies you should learn first to become a back end web developer.
OpenResty+
https://api7.ai/learning-center/openresty
OpenResty is a web platform for building web applications based on NGINX and Lua.
https://openresty.org/en/getting-started.html
First of all, you need to install OpenResty to your system.
https://www.youtube.com/watch?v=4VQP7eKq4oA&list=PLlR4WakbzQp0iUvHwJeBcG5MKWgGa_ahU
Step-by-step Tutorials on How to Use OpenResty
相关职位
社招5年以上技术类
1.负责安全系统(如WAF、风控系统、SIEM等)服务端的架构设计、开发与维护,保障公司整体业务安全。2.深入挖掘和分析业务需求,撰写技术方案并实施系统实现,负责推动相关项目落地。3.具备全局视角,负责调研行业内最新安全技术并结合业务项目进行落地。
更新于 2025-08-26
社招3年以上信息技术类
1.WAF管理与运维 负责公司现有WAF 的安装、配置、升级、维护和问题处理。 监控WAF的运行状态,制定告警和监控策略,确保产品的稳定性和高效性。 快速响应和处理运维、研发及业务团队提出的WAF相关问题与需求。 2.安全运营与SOC支持 理解安全运营相关流程,能够从运营视角解决安全问题。 协助解决SOC(安全运营中心)相关问题,优化安全运营工作流程。 3.网络安全架构规划 梳理公司南北向的网络拓扑结构,提出网络安全优化和改进方案。 提供专业的网络安全解决方案,确保公司网络架构的安全性和稳定性。 4.CDN安全管理 熟悉公司使用的CDN产品(Akamai 和 Cloudflare),负责其安全功能的管理与优化。 针对CDN相关安全事件及时响应与解决。
更新于 2025-09-18
社招5年以上A79687
1、负责网络安全产品(如Anti-DDoS、WAF、NTA等)后端服务的架构设计和实现,并推动技术演进; 2、支持网络安全产品为内外部客户提供服务。
更新于 2023-08-17