岗位职责:
Carry out test plan preparation, execute cybersecurity test work together with cooperative laboratories, and prepare certification test reports (50%)
执行测试方案制定,与合作实验室一起完成网络安全测试工作,编制认证测试报告 (50%)
Evaluate the customer's cybersecurity technology architecture with cybersecurity team, complete the preparation of assessment finding (20%)
与网络安全团队协作评估客户的网络安全技术架构,完成审核报告(20%)
Build up knowledge system construction with the team, enhance team's cybersecurity testing capability (20%)
与团队一起建设网络安全知识体系,加强团队网络安全测试能力(20%)
Other task assigned by manager. (10%)
完成汇报经理分配的其他任务(10%)
任职条件:
Bachelor’s degree in Cybersecurity, Computer Science, Automotive or equivalent;
网络(信息)安全、计算机科学、汽车或同等学历的学士学位;
At least 3 years cybersecurity working experience including 2 years security testing experience, scope should involve automotive electronics or IOT relevant;
至少3年网络安全工作经验,包括2年网络安全测试经验,测试工作范围应涉及汽车电子或物联网相关方面;
Comprehension of OWASP Top 10 (both web and IoT), OSSTMM, PTES, NIST and EVITA technical controls and standards, and able to understand and communicate how the standards and controls relate to risk management strategies.
理解 OWASP Top 10(网络和物联网)、OSSTMM、PTES、NIST 和 EVITA 技术控制和标准,并能够理解和交流标准和控制与风险管理策略的关系。
Familiar with automotive or IOT common automotive cybersecurity mitigations, understanding relevant cybersecurity standard.
熟悉汽车或物联网常见的网络安全缓解措施,并了解相关网络安全标准;
CISSP, CISP and relevant certification would be an important plus;
CISSP、CISP和相关认证将是一个重要的加分项;
Ability to cooperate with virtual global teams;
具备与全球团队合作的能力;
Strong communication and presentation skills;
较强的沟通和表达能力;
Good command of oral and written communication skills.
良好的口头和书面沟通技巧。