1. Analyzing, designing, evaluating, improving and evolving the safety architecture on policies, specifications, safety workflows, infrastructures and business systems.
2. Implement work plans from the safety committee and safety meetings.
3. Leading/Assisting specified work groups to implement safety policies, specifications and safety infrastructures.
4. Delivering employee safety training as assigned.
5. Developing necessary safety tool chains as needed.
6. Organizing / Assisting to organize safety audit and collecting the reports, analyzing safety audit reports to find key issues and to trigger a corresponding action plan.
7. Participation in product development and co-work as a safety consult to guarantee technical safety.
8. Performing safety walkthrough inspections, noting improper procedures, unsafe work practices, unsafe technologies in development, operations and maintenance, hereafter recommending and assisting to implement corrective actions.
9. Conducts incident investigations and assists with incident analysis and handling.
10. Maintaining current knowledge of applicable, county and city safety regulations, guidelines, standards, and relating to safe work practices.
11. Security assessment of enterprise systems and networks (e.g. privileges, data, web pages, applications, middle wares, web/app advertising column...)
12. Security vulnerability detection, collection, tracking and further research
13. Research and practice on technology on penetration test, cutting-edge attack, and development tools for attack and corresponding protection
1. Excellent verbal and written communication skills
2. Ability to process multiple tasks concurrently
3. Strong analytical skills and attention to detail
4. Ability to effectively respond to emergencies, constantly evolving situations, deadlines, or working conditions
5. Promotion of safety culture in the work environment
6. Possess excellent interpersonal skills, with the ability to cultivate strong and collaborative relationships across all levels of the workplace
7. Experience in developing training material and conducting safety training
8. Fluent English (written and spoken)
9. Fluent Mandarin (written and spoken) is a big plus but not have to be required
Candidates with different levels of the following items match a different position level
1. Strong knowledge and skill foundation on safety of OS, desktop, network, cloud and middleware.
2. Familiar with common vulnerabilities of web system including both frontend and backend
3. Familiar with normal attack methods and corresponding protect solution
4. Familiar with penetration test, attack and protect
5. Proficient coding skills on JS, Windows shell, Windows power shell and Linux shell (sh/bash)
6. Knowledge, skills and experience in developing safety tool chains and micro-service backend is a plus
7. Knowledge, skills and experience in penetration test and offensive-defensive confrontation to a micro-service system is a big plus
8. Knowledge, skills and experience in blockchain is a big plus
Don't have an account? Sign up
By Signing up, you confirm that you have read and agree with Jobenvoy.com's Terms & Conditions
at Cryptware Tech International (Private) Limited