resume.json

{"titleNameMap":{"educationList":"教育背景","workExpList":"工作经历","projectList":"项目经历","skillList":"个人技能","awardList":"获奖/证书","workList":"个人作品","aboutme":"自我介绍"},"avatar":{"hidden":false,"shape":"square"},"profile":{"name":"秦佳海","email":"OceanSec@foxmail.com","mobile":"19805417330","github":"博客：https://oceansec.github.io","zhihu":"","workExpYear":"1.5年","workPlace":"北京","positionTitle":"安全工程师"},"educationList":[{"edu_time":["2019.9","2023.7"],"school":"齐鲁师范学院","major":"计算机科学与技术","academic_degree":"本科","dataIndex":0}],"awardList":[{"award_time":"2024","award_info":"CISP、CCSK、数信杯优胜奖","dataIndex":0},{"award_time":"2023","award_info":"天网杯三等奖、陇剑杯"},{"award_info":"全国大学生信息安全竞赛华东北三等奖","award_time":"2022","dataIndex":2},{"award_time":"2021","award_info":"深信服安全服务认证工程师 SCSA-S、ISCC 信息安全与对抗技术竞赛一等奖","dataIndex":4},{"award_time":"2020","award_info":"CET4、二级 Office 、计算机三级信息安全、强网杯强网先锋、上海市观安杯教育组第二名 ","dataIndex":4}],"workExpList":[{"company_name":"京东集团","department_name":"信息安全部-蓝军","work_time":["2022.6"],"work_desc":"1.以企业蓝军的角色对京东内部及京东的客户提供攻防对抗服务、蓝军赋能服务、安全培训服务\n2.以京东蓝军的身份参与了多场国家级和行业级相关红蓝攻防演习，包括国家护网和北京护网","dataIndex":0},{"work_time":["2023.4-至今"],"company_name":"北银金融科技有限责任公司","department_name":"信息安全部-安全实验室","work_desc":"1.对公司开发项目进行代码审计和渗透测试\n2.\n3.安全攻防对抗，以攻击方视角对北京银行及子公司目标系统进行渗透测试、验证等，并给出可行的修复\n4."}],"skillList":[{"skill_name":"","skill_level":null,"skill_desc":"熟悉渗透测试流程、熟悉常见的 Web 漏洞原理及挖掘技巧，活跃于各大 SRC 平台，获得多张 CNVD 和教育 SRC 漏洞报送证书","dataIndex":0},{"skill_name":"","skill_level":null,"skill_desc":"熟悉 PHP、Java 代码审计，掌握常见的开发框架/中间件漏洞的利用方式和漏洞原理"},{"skill_name":"","skill_level":null,"skill_desc":"掌握工作组/云/域环境下的各种渗透思路，具有复杂网络环境的渗透测试经验"},{"skill_name":"","skill_level":null,"skill_desc":"熟悉使用 Python 语言进行自动化工具研发"},{"skill_name":"","skill_level":null,"skill_desc":"了解 Windows 安全及免杀"}],"projectList":[{"project_name":"CTF/AWD","project_role":"出题人/运维","project_time":" ","project_desc":"校内和团队 CTF 比赛和 AWD 比赛","project_content":"负责赛事筹划，比赛环境搭建，WEB 方向出题人","dataIndex":0},{"project_name":"护网红队","project_role":"攻击队","project_time":" ","project_desc":"2022 年全国护网、2022 年北京护网、2022 年新疆某地护网红队优秀攻击队、2022 年教育护网","project_content":"对授权项目进行渗透测试，以发现安全漏洞，获取业务权限或数据为目标，利用各种攻击手段，试图绕过防守方层层防护，达成既定目标","dataIndex":1},{"project_name":"护网蓝队","project_role":"防守方","project_time":" ","project_desc":"2021 年齐鲁师范学院攻防演练、2021 年江西省护网、2022年某单位20大重保","project_content":"负责监控安全设备流量，分析安全事件并进行应急响应，还原攻击过程对可疑目标进行溯源","dataIndex":2}],"workList":[],"aboutme":{"aboutme_desc":"曾工作在互联网公司和金融科技公司具有丰富安全工作经验，在校期间任网络安全社团社长，星盟安全团队成员\n喜欢学习新知识，做事细致认真，喜欢钻研精益求精。乐于分享知识在安全客、Freebuf 等平台发表过多篇原创文章。责任心强，协调沟通能力强，具备良好的执行力和良好的团队合作精神"},"theme":{"color":"#2f5785","tagColor":"#8bc34a"}}