上海招聘

Position Description

SUMMARY:

The Security Engineer works with other technical teams on complex cross-functional projects. He/She is responsible for the day-to-day security of an e-Commerce enterprise, focusing primarily on security policy, compliance, and strategy, with involvement in leading daily task work. This person will also be responsible for coordinating incident responses with customer’s security team as appropriate.

Position Requirements

Requirement Highlight:

1. VeriSign Certificate Management/Installation

2. Vulnerability remediation/scanning tools

3. Anti-fraud scanning

4. e-Commerce business knowledge (network/dotcom)

5. LDAP Account related activities

6. Firewall Request/Management

7. CISSP preferred

FUNCTIONAL COMPETENCIES:
- Advanced technical knowledge of Solaris, Linux and Windows operating systems
- Proven ability to create effective security policies, standards and procedures
- Broad knowledge of networking, routing protocols switching and remote access methodologies
- Solid project management and problem-solving skills
- Ability to consistently hit deadlines and keep security projects on track, facilitate handoffs from one functional area to another, raise red flags, follow-up on success of security projects, identify dependencies and risks, and understand the architectural impact on projects and decisions made during the project
- Advanced technical knowledge of IDS/IPS, Vulnerability assessment tools, Log management tools, Firewalls, Cryptography and Digital Certificates
- Explains technical possibilities and limitations well enough to effectively inform non-engineering team members
- Ability to see the bigger picture and recommend strategies for improving security as well as managing the implementation details
- Proficient in AAA-related technologies
- Understands cyber security legal issues and impact, and readily identify potential threats
- Knowledge of Software Development Lifecycle (SDLC)
- Ability to articulate advanced technical topics (e.g., TCP protocol analysis)
- Able to forecast long-term financial impact of technical designs

Position Requirements

REQUIRED QUALIFICATIONS:

- 5-8 years of experience in a variety of IT disciplines, including system, network and development
- Proven experience with incident response and forensics
- Demonstrated effectiveness by successfully leading large-scale, complex projects
- Supported projects through all phases: vision development; selling; design; develop; deploy; and has supported the product when operational
- Experience with analyzing business requirements and designing solutions
- Experience in implementing application security solutions
- Experience with (either as a customer or auditor) regulatory compliance audits such as PCI DSS, ISO 17799, CA SB 1386, etc.

EDUCATION & CERTIFICATIONS:
- B.S. in Computer Science or equivalent experience
- CISSP preferred. Other IT Security related certification a plus

博朗软件开发（上海）有限公司成立于2001年，是美国独资、领先的离岸软件开发公司，为美国和欧洲的金融、电子商务、新兴产业内知名公司和其他独立软件供应商提供高附加值的软件开发服务。
通过为客户提供基于长期合作关系的软件开发和维护服务，并拥有先进的技术和符合CMMi-level 5和ISO27001规范的管理流程，博朗软件为员工提供了非常稳定的软件开发环境。
博朗软件注重员工的个人发展，为员工持续提供所需的各种培训课程，也建立了贯穿员工职业生涯的导师制度和提升机制，并且为员工的内部岗位轮换提供了机会。快速发展的博朗软件同时也给诸多优秀员工提供了快速职业发展机会，使之成长为技术骨干及管理者。
除了系统专业的技术培训、研讨外，公司致力于不断提升员工的英语应用水平，提供100%英语工作环境，由专职英语外籍教师根据员工不同的英语水平设计相应的培训课程，并提供实时地技术英语支持。
由于客户多在欧美国家，员工会有大量派遣到海外培训与工作的机会，公司同时也会邀请海外客户到公司进行现场培训和指导。
工作之余，员工能够参与公司定期举办缤纷多彩的社交活动和充满乐趣的体育文化项目，丰富自己的业余生活。

随着公司业务持续迅速增长，我们需要更多的同伴来帮助我们一起达成梦想。博朗软件真诚地欢迎您的加入！

博朗软件目前有大量工作机会等待您的查询和应征。您只需要投递简历，我们将会尽快与您取得联系。
有关博朗软件的更多信息请访问博朗软件的官方主页：www.bleum.com

更多及时信息您也可以访问新浪认证微博：博朗软件。

邮件联系：recruiters@bleum.com