HCL Technologies

Tóm tắt công việc

The person will own and work on set of various tasks required to make an embedded device secure throughout the product development life. These activities include Security requirements analysis and specifications, Security assessment of a device, secure design and security features implementation etc. Some of the responsibilities are listed below – 

• Security assessment / Threat Modelling of existing products as well as new product designs. 
• Code review – SAST / Manual from security perspective. 
• DAST / Penetration testing of Embedded devices. 
• Remediation recommendations. 
• Leading / Monitoring / Building team of Device Security Testing. (Technical Lead Level).
• Presentations to Customers / Senior Management. (Technical Lead Level).

• 18 paid leaves/year (12 annual leaves and 6 personal leaves) 

• Insurance plan based on full salary + 13th month salary + Performance bonus 

• Meal allowance of 730,000 VND/month 

• 100% full salary and benefits as an official employee from the 1st day of working 

• Medical benefit for employee and family 

• Working in a fast-paced, flexible, and multinational working environment. Chance to travel onsite (in 53 countries) 

• Free snacks, refreshment, and parking 

• Internal training (Technical & Functional & English)

 • Working time: 8:30 AM - 6:00 PM from Mondays to Fridays

Senior (4-8 years) 
Technical Lead/Manager (9+ years) 

• Extensive experience in Embedded Device Security Testing with expertise in Secure Boot, Firmware Analysis, Hardware security, BIOS, Kernel, Linux OS Security, Wifi security, BLE, IOT Devices security for Edge, Gateway… in Automotive Cyber Security. 
• Hands-on Experience in CAN/UDS/USB/JTAG interface security testing. 
• Expertise in implementing and executing the Cyber Security Solutions and Penetration Testing for Network and Embedded devices. 
• Hands-on Experience in tools like Nessus, Kali Linux, CANoe, JTAGulator, Trace32. 
• Good Technical Presentation skills and Team collaboration skills must be preferred. 
• Security Certifications like CEH, ECSA or equivalent. 
• Basic Expertise in conducting the vulnerability scan like SAST, DAST for web application source code. 
• Expertise in Cyber Security standards like NIST, OWASP, SANS CWE, CVE and industrial best practices. 
• Expertise in Secure coding standards like OWASP secure coding, SANS CWE, CERT etc. 
• Certain level of security automation experience for CI/CD pipeline.
• Good English communication skill.