Bosch Global Software Technologies (BGSV)

Tóm tắt công việc

• Determine security requirements by evaluating business / customer's requirement and defining Security Concepts.
• Create innovative solutions tools/automation for project specific needs.
• Investigate and carry out Threat and Risk Assessment.
• Investigate possible logical attack scenarios by interpreting code review findings, and analyzing test results.
We are looking for security engineer who is able to conceive and implement solutions for enterprise wide security. The security engineer is responsible for performing high end design focusing on embedded devices used in various domains such as IoT, home automation, automobiles.

• Communicate complex vulnerability results to technical and non-technical audience.
• Reverse engineering, hardware hacking, and black-box style testing against embedded systems.
• Perform research and contribute to open source community on new attack methodology, vulnerability findings.
• Enhance security team accomplishments and competence by planning delivery of cyber-security solutions
• Conceiving of Security across composite Product life-cycle.
• To the holder of this position other tasks and activities related to the current job can be assigned by the department manager or assistant department manager

• Proficiency in programming languages (e.g. C, C++, Java, Python) or any other high level language
• Fluent English, strong communication, interpersonal and intercultural skills
• Vulnerability Assessment, IDS/IPS configuration/monitoring, Firewalls, TCP/IP packet analysis, Log analysis, and understanding of exploiting vectors
• Proficiency in usage of security testing tools such as disassemblers, flash dumper, JTAG finders.
• Knowledge in low level protocols such as SPI, JTAG, UART or cryptography is desirable.
• Experience in multiple OS programming (POSIX, WinAPI), secure kernel compilation and source code review experience.
• Experience of Network Security/ Protocols desirable.
• Ability to work under pressure during peak periods and respecting the deadlines