6 дней назад
Product Security Analyst (AI)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Product Security Analyst (AI/Cybersecurity): Supporting vulnerability management and product security incident response for networking products and services with an accent on CVSS scoring, exploit verification, and AI-assisted security code analysis. Focus on reproducing proof-of-concept exploits, assessing firmware, web, cloud, and mobile attack surfaces, and collaborating with engineering throughout the SDLC to validate remediations.
Location: Taipei, Taiwan; hybrid
Company
develops networking products and connectivity solutions for consumers and businesses.
What you will do
- Triage and score reported vulnerabilities using CVSS v3.1 or later.
- Reproduce and validate vulnerability reports and proof-of-concept exploits against products and services.
- Apply AI-assisted static and dynamic code analysis to investigate security issues and identify root causes.
- Use penetration testing tools to assess firmware, web, cloud, and mobile attack surfaces.
- Partner with engineering during the SDLC to review designs and code and validate security fixes before release.
Requirements
- Strong understanding of CVSS and consistent vulnerability prioritization.
- Hands-on experience verifying vulnerability reports and PoC exploit code.
- Working knowledge of AI/LLM-based tools for security code analysis or vulnerability research.
- Practical familiarity with penetration testing tools and methodologies for web, network, or firmware security.
- Experience with formal SDLC processes, secure design, and code review.
- Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience.
Nice to have
- Embedded, IoT, networking, router, gateway, or consumer device security experience.
- Familiarity with vulnerability disclosure and PSIRT workflows.
- Scripting experience with Python, Bash, or similar tools.
Culture & Benefits
- Performance-driven environment focused on innovative networking products.
- Collaborative culture built around transforming the future, customer focus, courageous communication, and teamwork.
- Equal consideration for qualified applicants and confidential handling of application information.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →