岗位职责:

1. Act and perform according to the Quality Policy (10%)

2. Keep professional attitude towards all customers and colleagues (5%)

3. Communicate and cooperate with other engineers (10%)

4. Perform other duties assigned by his project manager/group leader (5%)

5. Handle projects and finish tests and projects within lead time (25%)

6. Review projects and prepare technical reports (25%)

7. Explain non-compliance points to customers (5%)

8. Give professional suggestion to the client. (5%)

9. Share the standard knowledge and experiences. (5%)

任职条件:

1. IT field background or working experience related with cyber Security would be preferred.

2. Knowing RED Directive 2014/53/EU and familiar with standard of EN 18031 would be preferred.

3. University degree or above in Information Security, Cyber Security, Computer Science or equivalent.

4. Advance in both written and oral English and Chinese.

5. Hardworking, self-motivated, and having a mind-set of team work.

6. Good consultative communication skill to client.

7. Self-study ability.

8. Basic knowledge of information system cryptography, symmetric encryption, asymmetric encryption, secure storage and communication mechanisms.

9. Use of simple basic information security testing tools such as Wireshark, Nmap, Metasploit. Can associate the corresponding knowledge points or testing tools in the corresponding project practice.

10. Man-in-the-middle attack and data replay attack’s testing capability.

11. Understanding of OSI model and related communication protocols at each layer.

12. Basic knowledge of Network equipment, including switches, firewalls, router.

13. Understanding of basic principles of Web and simple operation commands.

14. Understanding of information systems’s confidentiality, integrity, availability (CIA).

15. Understanding of basic principles and application steps of common STRIDE methods. Related decision trees and threat modeling capabilities.

16. Using Linux command for basic maintenance, installation and network configuration.

17. Knowledge of software and hardware patch update management, simple penetration testing knowledge.

18. Basic knowledge of wireless communication technology, such as Bluetooth, WiFi, zigbee. General communication protocol encryption and decryption methods.

19. Knowledge of the industrial control networks and responding standard IEC 62443.