[KKCompany] Senior Information Security Engineer - KKCompany|Meet.jobs

薪資

1.25m - 1.75m TWD Annually

技能需求

    工作機會描述

    We are seeking a Security Engineer with experience to help KKCompany companies improve our security operations that focus on system protection, incident responding, policies and procedures, which keeps us away from the business risks. 

    In this role, you will work with both management support units and other business units to execute the group-level security plans. You will design security policies, implement related practices, investigate security events, and provide security training to the employees, in order to strengthen our digital resilience.

    Responsibilities:

    • Security issue management
    • Discover security vulnerabilities
    • Conduct regular security assessments
    • Internal security education training program
    • Integrate security tools with CI/CD pipelines
    • Design security related policies and guidelines
    • Design or review security related workflow and SOP
    • Review digital infrastructure and information systems
    • Cooperate with IT and service operation team to secure our services
    • Analyze, assess, and respond to various information security incidents and risks
    • Design countermeasures, mitigations, and containment of information security incidents

    Requirements:

    • Excellent communication skills
    • Excellent English reading and good English writing
    • Familiarity with one BSD or GNU/Linux OS distributions
    • Knowledge and skills of penetration testing tools or vulnerability scanner
    • Knowledge of CDN, DNS, HTTP, VPN, TCP/IP, TLS, OSI model and REST API
    • Experience in cloud computing
    • Experience in using container technology like: Docker
    • Experience in using version control system like: Git
    • Experience in software development or system administration
    • Experience with an interpreted language (PHP , Python, Ruby, or Shell Script)
    • Familiarity with issue tracking / project management tools like: GitLab, Trac or Jira
    • B.S or M.S degree in Computer Science, Security related field, or equivalent practical experience

    Nice to have:

    • Ability to interpret basic SQL queries
    • Ability to discuss, explain and summarize complex, technical topics
    • Contributions to the security or open source community
    • Experience in IT or IT security
    • Experience in monitoring and alerting tools
    • Experience in Privileged Account Management
    • Experience in MDM solutions like Microsoft Intune or Jamf
    • Experience in network management, firewall, IDS/IPS or SIEM
    • Experience in OpenLDAP, Microsoft AD or Azure AD management
    • Experience in using various open source tools and technologies to solve problems
    • Familiarity with secure coding practices
    • Familiarity with OWASP top ten web application security risks
    • CCSP, CISSP, CHFI, CND, CEH, CEH Practical or OSCP certification
    • Knowledge and skills of SAST, DAST tools
    • Knowledge about security frameworks like ISO 27000 series, PCI-DSS, NIST CSF

    KKCompany

    KKCompany 為亞洲領先的媒體科技集團,事業體服務範疇跨足亞洲最具影響力聲音社群品牌 KKBOX、影音串流服務 KKTV、娛樂藝文活動展演 KKLIVE、行動售票及一站式虛擬場館直播平台 KKTIX、文創投資 KKFARM、串流技術 KKStream等

    此企業的其他工作機會