阿里云安全工程师
实习兼职阿里云2026届实习生招聘地点:北京 | 杭州 | 上海状态:招聘
任职要求
【必备项】 1、熟识计算机网络,具备Linux环境下C/C++开发能力,至少掌握Perl/Python/Shell一种脚本语言; 2、熟知Web安全,了解当前流行的Web漏洞(XSS, SQL Injection, CSRF, etc.),了解Java开发框架(Struts, Spring, iBATIS, Hibernate,etc.); 3、具备服务端开发经验,熟悉Java、Spring框架、分布式技术栈,了解消息队列、分布式事务、docker容器、微服务原理; 4、具备Windows客户端安全攻防的经验,或了解Android/iOS无线客户端安全; 5、了解Linux系统管理和网络管理相关操作,了解Linux系统的安全漏洞,有Linux exploit code/shellcode编写经验; 6、熟悉TCP/IP协议栈和路由交换原理,熟悉企业级服务器安全 ; 7、熟悉数据分析或机器学习,并且有过安全领域的实践; 8、精通SQL,掌握Hadoop、Hive、R或相关大数据工具的使用方法;了解Scrapy、Selenium等爬虫框架的工作原理; 9、熟悉常用深度学习工具pytorch和tensorflow等至少一个的使用,能快速验证算法的可行性; 10、熟悉图像/视频/音频的编解码、处理、分析、建模和语义理解等相关技术,熟悉OpenCV的使用,具有信息论知识背景更佳; 11、熟悉密码学基础理论;同态加密、多方安全计算、本地差分隐私、密码工程优化、白盒密码、商密认证、SGX; 12、学习能力强,对新事物保有好奇心,并能快速适应新环境;良好的沟通能力和团队协同能力;能与他人合作,共同完成目标;对所在领域有热情,善于独立思考并反思总结。 【加分项】 1、在校园或互联网公司有相关实习或项目经历。
工作职责
阿里云持续推进AI 技术深化战略布局, 围绕AI 和云计算的基础设施建设、AI基础模型平台、企业级AI应用方向构建核心场景。为此,我们正积极招募优秀人才: 从Web安全到底层系统安全; 从客户端安全到无线产品安全; 从IoT安全到工业互联网安全; 从安全规范制定到实时应急响应; 从媒体安全到数字取证、数字确权; 一切的努力都是为了更安全! 从底层驱动到人机验证; 从网络编程到数据加密; 从大数据到风控服务; 我们需要的是全栈的技术人! 从反爬虫到隐私保护; 从反作弊到保障公平正义; 我们需要一颗侠义的勇于突破的心!
包括英文材料
Linux+
https://ryanstutorials.net/linuxtutorial/
Ok, so you want to learn how to use the Bash command line interface (terminal) on Unix/Linux.
https://ubuntu.com/tutorials/command-line-for-beginners
The Linux command line is a text interface to your computer.
https://www.youtube.com/watch?v=6WatcfENsOU
In this Linux crash course, you will learn the fundamental skills and tools you need to become a proficient Linux system administrator.
https://www.youtube.com/watch?v=v392lEyM29A
Never fear the command line again, make it fear you.
https://www.youtube.com/watch?v=ZtqBQ68cfJc
C+
https://www.freecodecamp.org/chinese/news/the-c-beginners-handbook/
本手册遵循二八定律。你将在 20% 的时间内学习 80% 的 C 编程语言。
https://www.youtube.com/watch?v=87SH2Cn0s9A
https://www.youtube.com/watch?v=KJgsSFOSQv0
This course will give you a full introduction into all of the core concepts in the C programming language.
https://www.youtube.com/watch?v=PaPN51Mm5qQ
In this complete C programming course, Dr. Charles Severance (aka Dr. Chuck) will help you understand computer architecture and low-level programming with the help of the classic C Programming language book written by Brian Kernighan and Dennis Ritchie.
C+++
https://www.learncpp.com/
LearnCpp.com is a free website devoted to teaching you how to program in modern C++.
https://www.youtube.com/watch?v=ZzaPdXTrSb8
Perl+
https://www.perl.org/learn.html
Useful links if you are interested in learning Perl
https://www.runoob.com/perl/perl-tutorial.html
本教程适合想从零开始学习 Perl 编程语言的开发人员。当然本教程也会对一些模块进行深入,让你更好的了解 Perl 的应用。
Python+
https://liaoxuefeng.com/books/python/introduction/index.html
中文,免费,零起点,完整示例,基于最新的Python 3版本。
https://www.learnpython.org/
a free interactive Python tutorial for people who want to learn Python, fast.
https://www.youtube.com/watch?v=K5KVEU3aaeQ
Master Python from scratch 🚀 No fluff—just clear, practical coding skills to kickstart your journey!
https://www.youtube.com/watch?v=rfscVS0vtbw
This course will give you a full introduction into all of the core concepts in python.
Bash+
[英文] The Bash Guide
https://guide.bash.academy/
A quality-driven guide through the shell's many features.
https://www.youtube.com/watch?v=tK9Oc6AEnR4
Understanding how to use bash scripting will enhance your productivity by automating tasks, streamlining processes, and making your workflow more efficient.
脚本+
[英文] Scripting language
https://en.wikipedia.org/wiki/Scripting_language
https://zhuanlan.zhihu.com/p/571097954
一个脚本通常是解释执行而非编译。脚本语言通常都有简单、易学、易用的特性,目的就是希望能让程序员快速完成程序的编写工作。
Web+
https://web.dev/learn
Explore our growing collection of courses on key web design and development subjects.
SQL+
https://liaoxuefeng.com/books/sql/introduction/index.html
什么是SQL?简单地说,SQL就是访问和处理关系数据库的计算机标准语言。
https://sqlbolt.com/
Learn SQL with simple, interactive exercises.
https://www.youtube.com/watch?v=p3qvj9hO_Bo
In this video we will cover everything you need to know about SQL in only 60 minutes.
Java+
https://www.youtube.com/watch?v=eIrMbAQSU34
Master Java – a must-have language for software development, Android apps, and more! ☕️ This beginner-friendly course takes you from basics to real coding skills.
开发框架+
[英文] Understanding Modern Development Frameworks: A Guide for Developers and Technical Decision-makers
https://www.freecodecamp.org/news/understanding-modern-development-frameworks-guide-for-devs/
Struts+
[英文] Getting Started
https://struts.apache.org/getting-started/
The framework documentation is written for active web developers and assumes a working knowledge about how Java web applications are built.
https://www.baeldung.com/struts-2-intro
Apache Struts 2 is an MVC-based framework for developing enterprise Java web applications.
Spring+
https://liaoxuefeng.com/books/java/spring/index.html
Spring是一个支持快速开发Java EE应用程序的框架。它提供了一系列底层容器和基础设施,并可以和大量常用的开源框架无缝集成,可以说是开发Java EE应用程序的必备。
https://spring.io/guides/gs/rest-service
https://spring.io/quickstart
Level up your Java code and explore what Spring can do for you.
iBATIS+
[英文] iBATIS Tutorial
https://www.tutorialspoint.com/ibatis/index.htm
Hibernate+
https://hibernate.org/orm/documentation/getting-started/
The following guides are meant to help you getting started with Hibernate ORM in an application.
https://www.baeldung.com/learn-jpa-hibernate
Hibernate is a standard implementation of the JPA specification, with a few additional features that are specific to Hibernate.
https://www.youtube.com/watch?v=xHminZ9Dxm4
Ever looked for a comprehensive tutorial to Hibernate & JPA that is fun and entertaining at the same time?
消息队列+
https://www.youtube.com/watch?v=xErwDaOc-Gs
Docker+
https://www.youtube.com/watch?v=GFgJkfScVNU
Master Docker in one course; learn about images and containers on Docker Hub, running multiple containers with Docker Compose, automating workflows with Docker Compose Watch, and much more. 🐳
https://www.youtube.com/watch?v=kTp5xUtcalw
Learn how to use Docker and Kubernetes in this complete hand-on course for beginners.
微服务+
https://learn.microsoft.com/en-us/training/modules/dotnet-microservices/
Microservice applications are composed of small, independently versioned, and scalable customer-focused services that communicate with each other by using standard protocols and well-defined interfaces.
https://microservices.io/
Microservices - also known as the microservice architecture - is an architectural style that structures an application as a collection of two or more services.
https://spring.io/microservices
Building small, self-contained, ready to run applications can bring great flexibility and added resilience to your code.
https://www.ibm.com/think/topics/microservices
Microservices, or microservices architecture, is a cloud-native architectural approach in which a single application is composed of many loosely coupled and independently deployable smaller components or services.
https://www.youtube.com/watch?v=CqCDOosvZIk
https://www.youtube.com/watch?v=hmkF77F9TLw
Learn about software system design and microservices.
Windows+
[英文] Windows 10 Tutorial
https://www.tutorialspoint.com/windows10/index.htm
This tutorial gives you all the indepth information on this new operating system and its procedures.
Android+
https://roadmap.sh/android
Step by step guide to becoming an Android developer .
https://www.youtube.com/playlist?list=PLQkwcJG4YTCSVDhww92llY3CAnc_vUhsm
iOS+
https://www.youtube.com/watch?v=UNH0bE4zPtY&list=PLSzsOkUDsvdu5Mm67aBYs2YPu2OM4mFzt
TCP/IP+
[英文] What is TCP/IP?
https://www.techtarget.com/searchnetworking/definition/TCP-IP
TCP/IP stands for Transmission Control Protocol/Internet Protocol and is a suite of communication protocols used to interconnect network devices on the internet.
数据分析+
[英文] Data Analyst Roadmap
https://roadmap.sh/data-analyst
Step by step guide to becoming an Data Analyst in 2025
机器学习+
https://www.youtube.com/watch?v=0oyDqO8PjIg
Learn about machine learning and AI with this comprehensive 11-hour course from @LunarTech_ai.
https://www.youtube.com/watch?v=i_LwzRVP7bg
Learn Machine Learning in a way that is accessible to absolute beginners.
https://www.youtube.com/watch?v=NWONeJKn6kc
Learn the theory and practical application of machine learning concepts in this comprehensive course for beginners.
https://www.youtube.com/watch?v=PcbuKRNtCUc
Learn about all the most important concepts and terms related to machine learning and AI.
Hadoop+
https://www.runoob.com/w3cnote/hadoop-tutorial.html
Hadoop 为庞大的计算机集群提供可靠的、可伸缩的应用层计算和存储支持,它允许使用简单的编程模型跨计算机群集分布式处理大型数据集,并且支持在单台计算机到几千台计算机之间进行扩展。
[英文] Hadoop Tutorial
https://www.tutorialspoint.com/hadoop/index.htm
Hadoop is an open-source framework that allows to store and process big data in a distributed environment across clusters of computers using simple programming models.
Hive+
[英文] Hive Tutorial
https://www.tutorialspoint.com/hive/index.htm
Hive is a data warehouse infrastructure tool to process structured data in Hadoop. It resides on top of Hadoop to summarize Big Data, and makes querying and analyzing easy.
https://www.youtube.com/watch?v=D4HqQ8-Ja9Y
R+
[英文] R Tutorial
https://www.w3schools.com/r/
R is often used for statistical computing and graphical presentation to analyze and visualize data.
大数据+
https://www.youtube.com/watch?v=bAyrObl7TYE
https://www.youtube.com/watch?v=H4bf_uuMC-g
With all this talk of Big Data, we got Rebecca Tickle to explain just what makes data into Big Data.
Selenium+
https://www.youtube.com/watch?v=j7VZsCCnptM
Learn Selenium by building a web scraping bot in Python.
https://www.youtube.com/watch?v=mOAXEQevCAE&list=PLhW3qG5bs-L_s9HdC5zNshE5Ti8jABwlU
深度学习+
https://d2l.ai/
Interactive deep learning book with code, math, and discussions.
PyTorch+
https://datawhalechina.github.io/thorough-pytorch/
PyTorch是利用深度学习进行数据科学研究的重要工具,在灵活性、可读性和性能上都具备相当的优势,近年来已成为学术界实现深度学习算法最常用的框架。
https://www.youtube.com/watch?v=V_xro1bcAuA
Learn PyTorch for deep learning in this comprehensive course for beginners. PyTorch is a machine learning framework written in Python.
TensorFlow+
https://www.youtube.com/watch?v=tpCFfeUEGs8
Ready to learn the fundamentals of TensorFlow and deep learning with Python? Well, you’ve come to the right place.
https://www.youtube.com/watch?v=ZUKz4125WNI
This part continues right where part one left off so get that Google Colab window open and get ready to write plenty more TensorFlow code.
算法+
https://roadmap.sh/datastructures-and-algorithms
Step by step guide to learn Data Structures and Algorithms in 2025
https://www.hellointerview.com/learn/code
A visual guide to the most important patterns and approaches for the coding interview.
https://www.w3schools.com/dsa/
OpenCV+
https://learnopencv.com/getting-started-with-opencv/
At LearnOpenCV we are on a mission to educate the global workforce in computer vision and AI.
https://opencv.org/university/free-opencv-course/
This free OpenCV course will teach you how to manipulate images and videos, and detect objects and faces, among other exciting topics in just about 3 hours.
相关职位
社招5-10年安全工程师岗
1. 负责安全托管客户的安全风险监测与安全事件的及时处置,定期向客户提交详尽的安全报告,确保客户的安全需求得到满足; 2. 根据客户项目的具体需求,提供专业的渗透测试、应急响应等安全服务,确保服务质量达到客户预期; 3. 实施并持续优化网络安全产品与服务,确保客户的安全服务结果质量,提升客户满意度; 4. 与客户建立并维护良好的沟通机制,确保客户需求能够被准确理解和高效执行,促进客户关系的长期稳定发展。
更新于 2025-06-18
社招8年以上A41531
1. 负责策划项目施工全过程的安全、保密和文明施工方案,并推动其落地实施,配合支持项目建设快速推进; 2. 负责引导、监督和考核项目各参建单位在安全、保密和文明施工的工作开展; 3. 参与总承包单位涉及的危大工程施工方案审核,并监督危大工程及危险源的施工过程管控; 4. 负责监督检查项目总承包单位安全制度、应急预案的建立及实施演练情况; 5. 负责协调制定项目各施工单位与设备工艺施工交叉作业的管控方案,做好现场工程与工艺设备施工交叉作业的管理工作; 6. 负责项目竣工备案前后,现场安全管理向工厂运维团队的移交及过渡管理工作; 7. 负责牵头项目的外联处置工作,对接各级监管机构的检查及监督整改工作。
更新于 2024-10-14
实习安全技术类
1. 负责信息系统安全风险评估并持续跟踪管管理; 2. 负责安全事件的实时响应、处理、调查及取证; 3. 参与团队基础架构、业务安全的风险评估,安全体系的建设。
更新于 2024-03-01