*薪資範疇是以美金(USD)來計算*
崗位職責：

• 負責安全攻防技術研究，能提供相關安全問題的解決思路或針對性解決的模型。
• 追蹤重大安全事件，分析漏洞和攻擊流程，及時提供預警訊息，並在出現相關漏洞情況下做復現攻擊路徑。
• 安全資料分析，對安全設備產生的日誌和採集的流量進行事件發現與挖掘，輸出安全威脅分析報告。
• 參與Web滲透測試、業務邏輯測試、緊急應變、安全訓練等工作。
• 建立業務安全模型，定期輸出安全相關報告。

附加優先條件:

• 在著名白帽子類網站發表嚴重的資訊安全漏洞者優先。
• 在各類資訊安全大會上有個人主題演講者優先。
• 獨立挖掘過0day漏洞者優先。
• 在知名SRC排名靠前者優先。

崗位要求:

• 計算機科學、資訊安全、網路安全或相關領域的學士學位。優先考慮高級學位或認證（例如 CISSP、CEH、OSCP）。
• 擁有7年以上網路安全相關工作經驗，實用基礎保全系統建置經驗，團隊管理經驗。
• 掌握紮實的安全基礎知識，包括網路、系統、應用等領域。
• 具備日誌分析經驗，能夠從日誌分析中發現異常事件。
• 有豐富Web滲透測試經驗，對常見Web安全漏洞的原理、危害、利用方式及修復方法有較深入的理解，熟悉主流的安全工具；有豐富的業務邏輯安全測試經驗，對業務流程中常見有風險點有深入理解和運用。
• 具有良好的洞察力、資料分析能力、歸納總結能力。
• 需熟練使用PHP、JAVA、Python、GO等至少一種程式語言。
• 具有踏實的工作心態，良好的團隊合作能力與溝通、學習能力。
• 如有需要，願意出差或被派遣到指定國家或項目地點。

其他福利：

• 海外工作許可證將由雇主擔保
• 醫療福利

Job Responsibility:

• Responsible for security attack and defense technology research and can provide solutions to related security issues or targeted solution models.
• Track major security incidents, analyze vulnerabilities and attack processes, provide early warning information in a timely manner, and reproduce attack paths when related vulnerabilities appear.
• Security data analysis, event discovery and mining of logs generated by security devices and collected traffic and output security threat analysis reports.
• Participate in web penetration testing, business logic testing, emergency response, security training, etc.
• Establish business security models and regularly output security-related reports.

Additional priority conditions:

• Candidates who have published serious information security vulnerabilities on well-known white hat websites are preferred.
• Candidates who have given personal keynote speeches at various information security conferences are preferred.
• Candidates who have independently discovered 0day vulnerabilities are preferred.
• Candidates who rank high in well-known SRCs are preferred.

Job Requirements:

• Bachelor’s degree in computer science, Information Security, Cybersecurity, or a related field. Advanced degrees or certifications (e.g., CISSP, CEH, OSCP) are preferred.
• More than 7 years of security work experience, practical basic security system construction experience, team management experience.
• Have a solid grasp of basic security knowledge, including network, system, application and other fields.
• Have log analysis experience and be able to discover abnormal events from log analysis.
• Have rich experience in web penetration testing, have a deep understanding of the principles, hazards, exploitation methods and repair methods of common Web security vulnerabilities, and be familiar with mainstream security tools; have rich experience in business logic security testing, and have a deep understanding and application of common risk points in business processes.
• Have good insight, data analysis and summarization capabilities.
• Must be proficient in at least one programming language such as PHP, JAVA, Python, GO.
• Have a down-to-earth work attitude, good teamwork skills and communication and learning abilities.
• Willing to travel or relocate to other countries or project location as assigned if required.

Other benefit: -

• Overseas work permits will be sponsored by employer
• Medical benefit

工作類型: 全職, 長期, 新鮮人
可以通勤/搬遷:

• 台北市: 長期通勤，或願意以僱主提供的方案進行搬遷 (優先考慮)

教育程度:

• 大學 (必填)

工作經驗:

• 網路及資訊安全相關: 7 年 (優先考慮)

語言:

• 英文 (必填)
• 中文 (必填)

出差意願:

• 75% (優先考慮)