系统安全专家职位描述模板

公司介绍

{{Write a short and catchy paragraph about your company. Provide information about the company’s culture, perks, and benefits. 提及办公时间, 远程工作的可能性, 以及任何让你的公司有趣的东西.}}

工作描述

We are looking for a Systems 安全 Expert with emphasis on {{WLAN/网络/web应用/渗透测试}}. You must be passionate about security and staying ahead of all possible threats to the system. You will be working with our development team to ensure that our network and technology stack is watertight. You will become thoroughly familiar with our architecture, helping to direct its development. You will provide regular reports of potential vulnerabilities and risk profiles. Good communication skills are critical to efficiently coordinate with our team and build a secure end product.

责任

• Actively look for security vulnerabilities in our application and network, 报告问题并描述可能的解决方案.
• 设计和维护我们的安全基础设施.
• 了解最新的安全新闻, keeping an eye out for the latest vulnerabilities and remedies emerging in the field.
• Actively liaise with the development team to ensure a secure architecture.
• Actively liaise with the development team to ensure thorough automated testing of all source code (e.g.(通过测试驱动开发).
• Provide regular reports auditing our current services and latest changes, 以及我们的内部实践.
• Monitor our server traffic, ticketing and reporting unusual packets.
• {{在此处添加其他相关职责.}}

技能与资历

• {{Relevant education in 计算机科学 or Computer 工程.}}
• {{CCNA、OWSE等相关认证.}}
• Thorough understanding of potential attack vectors such as XSS, 注射, 劫持, 社会工程, 等等.......
• Thorough understanding of cryptographic primitives and their underlying principles.
• 熟练掌握 {{您的应用程序环境}} 然后是命令行.
• Thorough understanding of networking protocols, such as TCP/IP.
• Thorough understanding of HTTP and HTTPS, as well as their underlying implementations.
• Thorough understanding of Content Delivery Networks and their integration into applications.
• Basic programming proficiency, sufficient to write and execute scripts from the command line.
• 活跃于安全社区. 定期参加聚会或会议.
• Contributes to open source projects, or creates purpose built tools for security work.
• 对敏捷开发过程的理解.
• 优秀的沟通能力. Ability to translate complex ideas into simple solutions on paper.
• {{Include any framework, library, or any other technology related to your development stack.}}