Security Researcher

Jobinhalt

Join Trend ‧ Join New Generation

趨勢科技 - 全球雲端資安領航者 / 全亞洲最大軟體公司 / 企業版圖橫跨五大洲 / 趨勢全球研發基地在台灣

===============================================================

Overview

Core Tech Services Security Red Team

The team performs ethical hacking to help identify potential threats and risks to businesses before they evolve into fully fledged threats. The information is then used by the organization to improve the system security, in an effort to minimize any potential attacks.

Job Responsibilities

• Perform penetration testing against critical Trend Micro cloud applications and corporate infrastructure
• Document and report findings to engineering and management teams
• Design and test new security technologies, automations, and controls
• Recognize and safely utilize attacker tools, tactics, and procedures
• Develop scripts, tools or methodologies to enhance red teaming processes
  

Qualification/Requirement

• Understanding of computer hardware, software, networks, communications and connectivity
• Familiarity in both Linux/Unix and Windows operating systems
• Proficiency in wireless, mobile device security, cloud technologies (IaaS, SaaS environments, etc.), and web technologies
• Experience using scan/attack/assess tools and techniques, including proficiency in at least the Metasploit framework
• Experience conducting full-scope assessments and penetration tests including: social engineering, server and client-side attacks, protocol subversion, web application exploitation
• Experience configuring, running, validating and contextualizing the findings of vulnerability discovery tools such as Nessus, SAINT, NeXpose, Retina, Nipper…etc.
• Understanding of SQL, XSS, CSRF, XXE, and other trends in web exploitation
• Demonstrated experience in technical report writing
• Minimum of 5 years of experience in penetration testing
• Experience with mobile and cloud environments
• Excellent oral/written communication and analytical skills
• Ability to work independently and as part of a team to achieve objectives
• Average or above English writing and speaking ability is expected
  

===============================================================

連結智慧 守護世界 --- Connected Intelligence for Securing a Connected World