东莞招聘

职位描述：
IT产品数据中心
职位描述：
The senior product software/application Security Engineer, takes responsibility on design, development, implementation, operation, monitoring, check and improvement of security development life cycle on R&D product software and IT application security.

工作职责：
1．Work closely with R&D key stake holders, responsible for and participate in design and development the policy/process/procedure of software security development.
2. Work closely with R&D key stake holders, participate in stage gate review of software development
3．Responsible for building and developing IT application security development framework and relevant process, deploy and implement the necessary tool
4．Perform expert advice and guidance to R&D and IT teams in security assessment, testing and in fixing vulnerabilities
5. Conduct software/application security audits, risk analysis, vulnerability testing and security reviews
6. Manage tools, servers and infrastructure supporting the application risk testing and analysis program.
7. Incident analysis, respond and management
8. Provide guidance on relevant software/application security industry standards and practices, establish the vulnerability library and knowledgebase at company level
9. Develop training material and responsible for new developers and for continuing education of R&D and IT application employees
10. Provide excellent coordination with R&D, IT teams and business departments

职位要求:
1. Bachelor's Degree or above in computer science, 5 years of experience in related position
2．Good command of written and oral English
3. Strong interpersonal communication, strong conscientious, work with the team effectively, can mobilise and inspire others.
4．Good understanding on security development cycle, such as SDL or OWASP SAMM
5. Deep knowledge at Java, .net, or mobile application development and with programming capability
6. Good knowledge of Windows and Linux, database and information security fundamentals, solid experience of implementing security baseline
7. Experience in common vulnerability issue analysis and resolve
8.Strong experience is using Application Security scan tools: AppScan, WAF, WebInspect, etc

Additional requirements:
1．Experience in risk assessment projects
2. Experience in development of security tools 举报 分享

艾默生网络能源是全球领先的关键基础设施技术及全生命周期服务供应商，为信息技术及电信技术体系服务。作为在智能基础设施技术领域可信赖的行业领导者，艾默生网络能源所提供的可快速部署的创新解决方案，能够在所有容量需求的情况下提升效率并确保可用性。2016年12月1日，艾默生宣布将网络能源业务出售给白金私募基金公司，同时，艾默生网络能源将正式更名为Vertiv。如欲了解艾默生网络能源的产品和服务详情，请访问www.EmersonNetwork.com.cn。
艾默生网络能源产品涉及通信电源、UPS不间断电源、机房专用精密空调、电力操作电源、太阳能和风能、户外一体化通信机系统、服务器机柜系统、ATS自动切换系统、STS静态切换开关、低压配电柜、SPM服务器电源管理系统、动力及环境监控系统、动力网保护产品等领域。