Description
Cymetrics 是亞洲領先的資安原廠之一，擁有專屬的高端資安產品。我們提供專業的紅隊演練、滲透測試和弱點掃描服務，集結了工程技術與資安專長的團隊。
團隊成員均擁有資安風險管理和滲透測試的專業知識，具有在四大管理顧問公司、領導資安服務商、知名品牌原廠的豐富經驗，且積極參與國際 CTF 競賽，並曾取得世界第三名。我們服務的客戶來自不同產業，包括政府、金融、製造業、高科技和電子商務等等。我們團隊也協助集團獲得 ISO 27001 和 ISO 27017 認證，強化集團資安治理。團隊的核心價值在於創新、專業和協作，以提供高效的資安解決方案。
身為 Cymetrics 的資安工程師，你會擔任紅隊演練、滲透測試的主要攻擊手，深入挖掘弱點，並一同與 Mid, junior level 的夥伴一起完成專案。在自有開發的產品中提供專業的想法與意見。一起討論並優化專案執行的成效。
Know more about Cymetrics: https://cymetrics.io/zh-tw/
TechBlog: https://tech-blog.cymetrics.io/
How to apply
Please apply for this position through 👉 https://grnh.se/bfdfcf844us
It will help us process your applications faster!
Our Product
我們的資訊安全團隊 Cymetrics，專注於提供全面的資安評估 SaaS 平台。團隊成員均擁有資安風險管理和滲透測試的專業知識，具有在四大管理顧問公司、台灣領導資安服務商、知名品牌原廠的豐富經驗，且積極參與國際 CTF 競賽，並曾取得世界第三名，2024 年更獲得知名藍隊競賽 HITCON CYBER RANGE 第一名佳績。我們服務的客戶來自不同產業，包括政府、金融、製造業、高科技和電子商務等等。我們團隊也協助集團獲得 ISO 27001 和 ISO 27017 認證，強化集團資安治理。團隊的核心價值在於創新、專業和協作，以提供高效的資安解決方案。
Responsibilities
- 規劃以及執行紅隊演練、滲透測試，協助客戶發現漏洞並進行改善且驗證修復結果。
- 與客戶進行專案會議，開會溝通，釐清並協助客戶解決問題。
- 協助自動化資安工具開發，與軟體工程團隊一同完成自有 SaaS 產品。
- 與產品開發團隊合作，協助改進資安產品及平台。
- 研究網站或開源專案漏洞，將研究結果寫成文章發佈至公司的技術文章部落格。
Requirements
- 三年以上紅隊演練、滲透測試，善於對內部網路橫向移動與滲透。
- 對現代 Web 框架（如React, Angular, Vue.js）和客戶端安全弱點（例如XSS, CSRF, CSP bypass, GraphQL等）理解，並熟悉其背後原理。
- 熟悉 OWASP 測試指南和其他安全測試方法，對網頁漏洞、作業系統、網路架構有深入理解，並熟悉其背後原理。
- 能夠清晰地整理和撰寫測試結果及修補建議，並有效地與團隊和客戶溝通。
Plus
- 對區塊鏈相關的資安技術有興趣
- 有打過知名廠商 bug bounty 或是參加過國際 CTF 的經驗 (或有同等 CVE 弱點)
- 擁有 OSWE、OSEP 或 OSCP 證照 (或其它同等資訊安全證照)
- 擅長撰寫資安相關之技術文章（漏洞研究、CTF writeup 等等）
- 參與過開源項目，展現對安全社群的貢獻和合作精神。
- 流利的中英文聽說能力，並與客戶講解滲透測試報告內容。
Cymetrics is one of the leading cybersecurity solution providers in Asia, offering exclusive high-end cybersecurity products. We specialize in professional red teaming, penetration testing and vulnerability scanning services, assembling a team with engineering expertise and cybersecurity specialization.
Team members possess professional knowledge in cybersecurity risk management and penetration testing, with extensive experience in major consulting firms, leading cybersecurity service providers, and renowned brand OEMs. They actively participate in international CTF (Capture The Flag) competitions, achieving top three places globally. Our clientele spans diverse industries, including government, finance, manufacturing, high-tech, and e-commerce, among others. Additionally, our team assists the group in obtaining ISO 27001 and ISO 27017 certifications, reinforcing the group's cybersecurity governance. The core values of our team lie in innovation, professionalism, and collaboration, aiming to deliver efficient cybersecurity solutions.
As a Cybersecurity Engineer at Cymetrics, you will serve as the primary attacker in red teaming and penetration testing, deeply probing vulnerabilities, and collaborating with mid and junior-level partners to complete projects. You will contribute professional insights and opinions to our proprietary product development, engaging in discussions to optimize project execution effectiveness.
Know more about Cymetrics: https://cymetrics.io/en-us/
Tech Blog: https://tech-blog.cymetrics.io/
Our Product
Our cybersecurity team, Cymetrics, is committed to providing a comprehensive cybersecurity assessment SaaS platform. With expertise in risk management and penetration testing, our team includes professionals from Big 4 consulting, leading cybersecurity services provider global banks, and top cybersecurity firms. Cymetrics excels in international CTF competitions, achieving a top-three global ranking and securing 1st place in the prestigious 2024 HITCON Cyber Range blue team. competition. Cymetrics supports clients across government, finance, manufacturing, high-tech, and e-commerce sectors. We’ve also secured ISO 27001 and ISO 27017 certifications for our group. Focused on innovation and collaboration, Cymetrics provides an AI security and LLM verification platform to assess AI models for vulnerabilities and Responsible AI compliance.
Responsibilities
- Planning and executing redteam project and penetration tests, aiding clients in identifying vulnerabilities, verifying remediation, and validating fix outcomes.
- Conducting project meetings with clients, engaging in effective communication, clarifying issues, and assisting clients in problem resolution.
- Assisting in the development of automated security tools, collaborating with the software engineering team to complete proprietary SaaS products.
- Collaborating with the product development team to enhance cybersecurity products and platforms.
- Researching vulnerabilities in websites or open-source projects and documenting findings in articles published on the company's TechBlog.
Requirements
- Three or more years of practical experience in red teaming, penetration testing and lateral movement in internal networks.
- Familiarity with modern web frameworks (such as React, Angular, Vue.js) and client-side security vulnerabilities (e.g., XSS, CSRF, CSP bypass, GraphQL).
- Familiarity with OWASP testing guides and other security testing methodologies, with a deep understanding of web vulnerabilities, operating systems, network architecture, and underlying principles.
- Ability to articulate and document test results, provide remediation suggestions clearly, and effectively communicate with teams and clients.
- Fluency in spoken and written English to explain penetration test reports to clients.
Plus
- Interest in blockchain-related cybersecurity technology.
- Experience in bug bounty programs from reputable companies or participation in international CTFs (or equivalent CVE vulnerabilities).
- Possession of OSWE, OSEP or OSCP certifications (or other equivalent information security certifications).
- Proficiency in writing technical articles related to cybersecurity (vulnerability research, CTF write-ups, etc.).
- Involvement in open-source projects, demonstrating contributions to and collaboration within the security community.
- Fluency in spoken and written Chinese.
How to apply
Please apply for this position through 👉 https://grnh.se/bfdfcf844us
It will help us process your applications faster!
Interview process
- Phone interview (30mins)
- Interview (1.5 hrs) :
- 45 mins with Team Members
- 30 mins with Hiring Managers, 15 mins with HR
公司福利
好好工作，好好休息 (正職員工適用)
- 加入第一天即享有年假，首年 15 天年假（依照入職比例發）
- 每年全薪病假 5 天、全薪生理假 3 天
一起成長，持續精進
- 參加 conference、外部訓練都有補助 (正職員工適用)
- 證照補助 (正職員工適用)
- 前、後端技術分享社團、產品與管理職能讀書會
努力工作，我們也用力生活
- 健康檢查補助 (正職員工適用)
- 社團補助 - 各種運動社團、桌遊社、電玩社、這週要幹嘛社
- 定期補充的零食以及飲料櫃、義式咖啡機、氣泡水機
- 舒適的開放式工作環境，距離捷運台北101站 5分鐘路程
Similar jobs
Job Overview:Cymetrics specializes in delivering a comprehensive cybersecurity assessment SaaS platform. Team members are experts in cybersecurity risk management and penetration testing, with extensive experience at Big…
你將成為我們推動年度專案的核心夥伴！在這個角色中，你將第一線負責品牌客戶的深度對接、專案的全盤執行與成效月報的分析彙整。你將成為銜接各方資源的重要橋樑—將密切協調內部的網紅行銷團隊、外部合作廠商及外包人員，確保龐大的專案齒輪流暢運轉。 為確保專案的高品質，今年度你將擁有明確的目標，全心專注於這個旗艦品牌的服務。而在今年度專案圓滿達成後，我們也將視你的工作表現與意願，為你安排其他多元品牌客戶的服務或部門輪調機會，提供你持續成長的職涯舞台。…
你將成為我們在台灣辦公室的重要夥伴，第一線參與來自日本或跨國企業的行銷專案，在真實市場中學習並實踐品牌溝通與專案管理的能力。這個角色將密切與跨國團隊及外籍主管合作，深入理解國際品牌的行銷策略。你不僅是銜接內外部合作的重要橋樑，更是協助台灣團隊推進專案執行的核心引擎。如果你熱愛行銷、跨文化交流，並希望累積與外籍主管共事的實戰經驗，這將會是你踏入國際行銷領域的絕佳起點！我們期待你成為團隊中的亮眼存在，也將提供你完整的職前培訓與成長機會。 W…
About the role We are looking for a talented Machine Learning Engineer to join our Product Core Engineering team. You will be responsible for building and optimizing machine learning workflows that directly power our AI-…
Job Overview We are looking for a dynamic Client Success Manager to join our growing team. As part of a fast-growing, entrepreneurial company, you'll have the opportunity to help organizations navigate the rapidly evolvi…
Job Overview OneSavie Lab是一個結合 Web3與AI科技的頂尖實驗室，致力於為Web3 生態系統以及眾多參與者提供先進的智能風險監控和管理工具，包括中心化和去中心化的多元策略選擇。 OneSavie Lab的核心使命是為投資者、機構和其他虛擬資產領域的利益相關者提供全方位的支持。從代幣風險監控、資產情報分析，到Web3的風控諮詢，我們都能提供專業、精確的服務，在新興領域為客戶護航。 OneSavieLab 在招募…
About the role We are seeking an experienced Machine Learning Lead to helm our Machine Learning team. In this pivotal role, you will be the engineering architect behind Vulcan’s core AI capabilities. You will act as the…
想要讓你的語言能力跟上 AI 浪潮嗎？ 我們正在找尋對文字敏銳、對 AI 有好奇心的夥伴。這份工作不需要你會寫程式，而是需要你用中文、英文、韓文或阿拉伯文，幫忙檢測 AI 在不同語言環境下夠不夠安全、會不會被「教壞」。 如果你平常就在用 AI 工具，且喜歡跟機器人對話，你就是我們要找的人！ 🛠️ 工作內容： 我們把複雜的技術簡化為兩個重點任務： 當 AI 的「行為導師」（數據標註與分類）： AI 就像小孩，需要有人告訴它什麼能說、什麼…
About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class…
Job Overview OneSavie Lab, OneInfinity 是一個結合 Web3與AI科技的頂尖實驗室，致力於為Web3 生態系統以及眾多參與者提供先進的智能風險監控和管理工具，包括中心化和去中心化的多元策略選擇。 OneSavie Lab的核心使命是為投資者、機構和其他虛擬資產領域的利益相關者提供全方位的支持。從代幣風險監控、資產情報分析，到Web3的風控諮詢，我們都能提供專業、精確的服務，在新興領域為客戶護航。 O…
Est. 120,000 EUR
We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integra…
Company Introduction Coupang is reimagining the shopping experience with the goal of wowing each customer from the instant they open the Coupang app to the moment an order is delivered to their door. Our services in Taiw…
OneDegree is a new generation of InsurTech that reimagining the industry with design and digital innovation. Our mission is to set new standards for insurance that puts customers first. We are among the first batch of vi…
Job Overview OneSavie Lab, OneInfinity 是一個結合 Web3與AI科技的頂尖實驗室，致力於為Web3 生態系統以及眾多參與者提供先進的智能風險監控和管理工具，包括中心化和去中心化的多元策略選擇。 OneSavie Lab的核心使命是為投資者、機構和其他虛擬資產領域的利益相關者提供全方位的支持。從代幣風險監控、資產情報分析，到Web3的風控諮詢，我們都能提供專業、精確的服務，在新興領域為客戶護航。 O…
OneDegree is a new generation of InsurTech that reimagining the industry with design and digital innovation. Our mission is to set new standards for insurance that puts customers first. We are among the first batch of vi…
Est. 90,000 EUR
About Staffbase We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry…
We are looking for a On-Duty Customer IT Support Specialist to join our Customer IT Support team. The Customer IT Support team is responsible for managing technical issues of the company’s clients, resolving issues relat…
在網紅行銷部門，您將負責根據我們的重要客戶行銷目的選出具影響力的網紅／藝人等，依其預算、需求，提出切角、提案，進行溝通、並實際執行。 目前該部門業務仍在不停成長中。為了進一步擴大業務，我們需要你/妳的加入！ What You Will Do 服務知名美妝品牌客戶，完成網紅專案規劃與執行 參與內部會議、處理行政流程 其餘公司交辦事項 Who You Are 執行網紅（業配）專案，且服務美妝品牌客戶經驗超過兩年 熱愛各式美妝保養產品、常看且…
Est. 120,000 EUR
We are inviting you, a highly motivated and results-oriented Enterprise & Cloud Security Manager to join our team on a full-time basis. Our team has unique expertise in research, analysis, and product development. By…
Est. 90,000 EUR
About Staffbase We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry…
Est. 120,300 USD
About SHEIN SHEIN is a global online fashion and lifestyle retailer, offering SHEIN branded apparel and products from a global network of vendors, all at affordable prices. Headquartered in Singapore, with more than 15,0…
We are looking for a QA Engineer - Backend (Golang) for the Bring a Friend Team — a product backend team focused on building and improving customer-facing services. The team works on our referral program, including vario…
Please complete the attached Internal Transfer Request Form and submit. Please make sure to apply with your Coupang e-mail address. 公司介紹 我們在台灣的包括「火箭速配」，以實惠的價格為多種精選商品提供隔日到貨服務。「火箭跨境」供應來自韓國、美國等地數百萬種暢銷商品，並提供國際速配服務。 我們正在尋覓人才協…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Why Valtech? We’re the experience innovation company - a trusted partner to the world’s most recognized brands. To our people we offer growth opportunities, a values-driven culture, international careers and the chance t…
公司介紹 我們在台灣的包括「火箭速配」，以實惠的價格為多種精選商品提供隔日到貨服務。「火箭跨境」供應來自韓國、美國等地數百萬種暢銷商品，並提供國際速配服務。 我們正在尋覓人才協助我們帶領 Coupang 台灣拓展業務。這是個難得的機會，一同參與 Coupang 在台灣的成長，打造一個讓我們的顧客自問「沒有 Coupang，我該怎麼生活？」的世界。 職位簡介 策略聯盟行銷團隊負責人（Head of Affiliate Marketing）…
Est. 90,000 EUR
About Staffbase We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry…
We are looking for an IT Controls & Compliance Manager to implement IT controls as part of our SOX compliance program ahead of our IPO. You will be the key person ensuring the integrity and security of data that unde…
Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, a…
Est. 80,000 EUR
We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, produ…