Information Security Engineer 資訊安全工程師

Job Overview

We are looking for a capable Security Engineer, who enjoys security work and possesses both deep and wide expertise in the security space.
In this role, you will Engineer, implement and monitor security measures for the protection of our computer systems, applications and infrastructure, such as, WAF, DDoS, DNS, Networking, VPN, and etc. Besides applying the best practice, it’s expected for this role to be working in security research, reporting 0-days frequently, and on the cutting edge of what’s possible.

Key Responsibilities
● Work directly with the project teams to facilitate building secure workflows, processes, systems, and services.
● Develop best practices and security standards for the organization.
● Understand software, infrastructure and internet needs and adjust them according to the business environment.
● Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
● Ensure the organization knows as much as possible, as quickly as possible about security incidents.
● Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.
● Find cost-effective solutions to cybersecurity problems.
● Conduct the internal/external security test/audit on our service, application, and infrastructure.
● Assist fellow employees with cybersecurity, software, hardware or Infra. needs.


Technical Skills
● Ability to discover and identify SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond). 
● Knowledge of common authentication technologies including OAuth, SAML, CAs, OTP/TOTP. 
● Knowledge of browser-based security controls such as CSP, HSTS, XFO.
● Experience with standard web application security tools. i.e.: Arachni, BurpSuite … etc.

• Please attach your English CV with your application.