北京招聘

Reporting to the Manager of the Security Lifecycle Services team, you are an experienced software developer with excellent analysis skills, and a strong background in software security. In collaboration with SLS security experts based in Ottawa and with the Application Security Architect, you will be analyzing the security of software applications poroduced by Irdeto against defined security requirements and the general threat landscape of the applicable marketplaces.

The SLS team is responsible for delivering the security services associated with Irdeto Cloakware products, which combine Digital Asset Protection with Security Lifecycle Management. This position is the primary eyes and ears of this team in Beijing, working with peers in Engineering and with a second SLS team member who performs internal ethical hacking on relevant applications.

Required Skills

· Hands-on binary reverse engineering of software, preferably on mobile platforms such as Android and iOS..

· Practical knowledge of how hacking and piracy work in the Asian market.

· Good research skills to find and understand emerging or deployed hacking or piracy threats to our customer’s products and services.

· Ability to analyze software attacks, understand and report how they may have circumvented security features.

· Ability to test an Irdeto software implementation against documented security requirements and report in a timely, honest and constructive way on the strengths and weaknesses found.

· Assertiveness as required to constructively raise security concerns with engineering development teams, ensure they are addressed, and escalate if not.

· Internet searching experience, preferably automated, relating to security and hacking activity.

· Knowledge of how to deal with and analyze potentially suspect or malicious software e.g. Red LANs, virtual machines, emulators etc.

· Able to propose software countermeasures against attacks in the field to be developed in collaboration with Irdeto Engineering, as well as pro-active security updates in advance of a field security issue.

· Work in collaboration with Irdeto engineering groups, conducting security assessments, security audits (black box attacks) of Irdeto products and security assurance programs, so that they can deploy their products with confidence and with strong resistance to attacks.

· Familiarity with a variety of software platforms such as Windows, Linux, iOS, and Android.

Required Experience

· A university degree in engineering, computer science or equivalent technical degree with at least 5 years of software development experience in C and C++. Java and scripting experience is also relevant.

· Hands-on reverse engineering experience on consumer platforms (whether preformed as part of official job functions or not).

· Proficient in the latest forensic, response and reverse engineering skills and exploit methodologies used by hackers.

· Very strong analytical skills. Familiarity with static and dynamic software analysis tools such as IDAPro, OllyDbg, WinDbg, Procmon, gdb, AndBug.

· Ability to work in a collaborative manner with many stakeholders (internal and external) including technical staff, management, and product development and support teams.

· Continuously learning and actively seeking out new learning opportunities in hacker exploit techniques as a master in intrusion prevention/detection.

· A desire and enthusiasm to work in a highly dynamic environment, dealing with unpredictable challenges and coming up with creative solutions under aggressive time lines.

Irdeto，the proven expert in content security, provides comprehensive solutions for the protection of digital media in digital TV, IPTV and mobile environments. The company’s support, sales and R&D offices are located worldwide with corporate headquarters near Amsterdam, the Netherlands. Irdeto’s goal is to help operators increase revenue from their content by offering best-of-class security solutions supporting a wide range of revenue models, including subscription, pay-per-view, video-on-demand, pre-paid, PVR and push VOD. With nearly forty years of experience in pay media, Irdeto offers both hardware- and software-based solutions.



The world’s most trusted content security

With the acquisition of competitor CryptoWorks in spring 2006, Irdeto now has more than 300 customers around the world. Irdeto is the world’s most widely deployed content security platform. Irdeto’s solutions are deployed in some of the world’s most demanding security applications, including pay media, telco, mobile and government environments.



The world’s most satisfied customers

Independent customer loyalty surveys show that Irdeto customers consistently score significantly above the industry benchmark in every category, earning Irdeto Satmetrix Gold Elite status for its excellence in customer satisfaction. In addition, operators consistently praise both the reliability and user-friendliness of Irdeto products compared to the products of the competition, resulting in lower operational expenditure by the operator.



Any content, any network, any device

Irdeto offers the widest choice of innovative content security solutions for small, medium and large Digital TV, IPTV and Mobile operators and handset manufacturers.



The most effective security strategy

Irdeto customers have enjoyed more piracy-free years and fewer smart card swaps than any other company’s customers as the result of its successful holistic security strategy. The company has released five generations of smart cards since 2000, all of which still remain secure to date. And unlike some competitors, Irdeto does not recommend or require mandatory smart card swaps, allowing operators to get maximum return on investment.

 

爱迪德公司是内容安全保护领域的全球领先提供商，专为数字电视、IPTV和移动环境下的数字内容保护提供全方位的解决方案。公司总部彼邻荷兰首都阿姆斯特丹，并在全球各地均设立有支持、销售和研发分公司。爱迪德公司的目标是为运营商们提供世界一流的、能支持如订制，按次付费，预付费，视频点播，PVR 和Push VOD等大范围业务收入模式的安全保护解决方案，从而不断增长运营商在内容业务上的收益。拥有近40年付费媒体经验的爱迪德公司可提供基于硬件和基于软件的解决方案。

 

全球备受信赖的内容保护

在于2006年春天收购了竞争对手CryptoWorks之后，爱迪德公司的客户遍及60个国家，数量超过300多家，是全球最为广泛部署的内容安全保护平台。爱迪德公司的解决方案已经在世界上一些最需要安全保护的应用领域进行了部署，其中包括付费媒体、电信、移动以及政府等领域。

 

全球最令客户满意的内容保护

独立客户忠诚度调查显示，爱迪德公司连续几年来在客户满意度的各项评分中均远远超出业内平均水准，使之在客户满意度方面赢得了Satmetrix 公司Gold Elite的称誉。另外，在几年来与同类产品的竞争中，由于爱迪德产品所具有的可靠性和用户友好的特性，降低了运营商的运营成本，从而一直受到运营商们的称赞。

 

任何内容、任何网络、任何设备

无论是大型、中型还是小型数字电视、IPTV和移动运营商以及手持设备制造商，爱迪德公司都能为创新的内容安全解决方案提供最宽泛的选择。

 

最有效的安全保护策略

与其它公司的客户相比，爱迪德成功的全面安全保护战略确保了自己的客户多年来免受盗版和少量的智能卡更换的困扰。自2000年以来，爱迪德公司推出了五代智能卡。时至今日，五代智能卡安全性都得到了验证。不同于某些行业竞争者，爱迪德公司不推荐或要求进行强制性的智能卡更换，从而使运营商获得了最大的投资回报。