北京招聘

职位描述：
Responsibilities
? Lead SecArch deep dives with the requestor of the assessment;
? Conduct assessment and provide technology risk/requirements to the requestor. Areas covered:
? AAA Authentication, Authorization, Auditing
? Application Security Session Security, Vulnerability/Pen Testing items, Input Validation
? Secure data transport and storage
? Periodically review security reference architecture (security blueprints) and conduct updates/enhancements;
? Participate in various Operational and Technology Risk governance processes


Requirements
? Bachelors Degree with minimum 5 years relevant work experience in high-paced, enterprise environment;
? Required Experience in conducting Information Security, IT Security, Audit assessments. Presenting the outcomes of the assessment and obtaining buy in;
? Required The candidate must have working experience in the following application/network security domains:
? Authentication: SAML, SiteMinder, Kerberos, OpenId;
? Entitlements and identity management;
? Data protection, data leakage prevention and secure data transfer and storage;
? App Security - validation checking, software attack methodologies;
? Cryptography encryption and hashing;
? Good knowledge of standard network model and the risks that present at each layer, the functions of network equipment such as switches, routers, firewalls, proxies, vpn, and load-balancers, and to understand network architecture;
? Familiar with the primary operating systems (Unix, Windows, z/OS, Mac OS);
? Experience in testing tools, at least one of Veracode, Fortify, OunceLabs, AppScan, WebInspect, Burp;
? Required working knowledge of programming and scripting languages: Java, JavaScript, C#, C/C++, Perl, Python, Ruby;
? Good knowledge of frameworks, protocols and subsystems: J2EE, .NET, Spring, RPC, SOAP, MQSeries, JMS, RMI, JMX, Hibernate;
? Knowledge of JSP /Servlet/EJB or ASP.NET, HTTP/HTTPS, Cookies, AJAX, JavaScript, Flex / Silverlight;
? CISSP or other industry qualification;
? Excellent communication skills both in English and Mandarin. 举报 分享

华德士中国

华德士于2008年进入中国市场，目前在上海、苏州及华南地区设立有分公司。我们凭借专业素养和丰富经验为各大公司招聘***双语人才，并于最近被评选为***国际人才招聘顾问机构。

我们的顾问都有相关行业的从业经验，因此能更深刻地理解您的需求。我们主要为以下领域招聘中高级专业人才：会计与财务、银行与金融服务、工程与运营、高层管理、人力资源、信息技术与转型、市场营销、采购与供应链等领域。