5. 資安事業群 - 研發部 - 資安工程師｜InfoSec BU - R&D - Cybersecurity Engineer

## 職務說明

從攻擊者視角研究系統與產品安全性，透過攻擊模擬、弱點研究與技術驗證，分析防禦機制的限制與可能改善方向。

## 工作內容

• 建立攻防測試環境，重現攻擊行為與攻擊鏈。
• 執行滲透測試、攻擊模擬與弱點驗證。
• 研究 Web、API、Network、Windows、Linux 等攻擊面。
• 分析權限提升、橫向移動及其他進階攻擊行為。
• 從程式碼與系統行為分析弱點成因與利用方式。
• 開發 PoC、攻擊模擬、漏洞驗證及研究工具。
• 研究防禦機制與可能的繞過方式。
• 將研究結果整理為可應用的防禦與技術改善方向。

## 必要條件

• 2 年以上滲透測試、紅隊或漏洞研究相關經驗。
• 熟悉常見攻擊手法與滲透測試流程。
• 熟悉 Web、API、Network 或 Operating System 至少一類攻擊面。
• 具程式碼閱讀與漏洞分析能力。
• 熟悉 Python 或其他程式／腳本語言。
• 具網路原理與基本封包分析能力。

## 加分條件

• 具 CTF、漏洞揭露、Bug Bounty 或紅隊演練經驗。
• 熟悉內網滲透、Active Directory、橫向移動或權限提升。
• 具 Malware Analysis 或 Reverse Engineering 經驗。
• 熟悉 Windows Internals 或 Linux Internals。
• 具安全機制研究或繞過經驗。
• 具 Kernel、ETW、eBPF 或其他系統底層研究經驗。
• 具 OSCP、OSWE、OSEP、OSED 或同等實務能力。

不要求同時具備所有研究領域經驗，會依個人專長安排主要研究方向。

---

## Position Overview

Research system and product security from an attacker’s perspective through attack simulation, vulnerability research, and technical validation.

## Responsibilities

• Build security research environments and reproduce attack behaviors and attack chains.
• Perform penetration testing, attack simulation, and vulnerability validation.
• Research attack surfaces across web applications, APIs, networks, Windows, and Linux systems.
• Analyze privilege escalation, lateral movement, and other advanced attack techniques.
• Analyze source code and system behavior to understand vulnerability root causes and exploitation methods.
• Develop PoCs, attack simulation tools, vulnerability validation tools, and research utilities.
• Research limitations and possible bypasses of defensive mechanisms.
• Translate research findings into actionable defensive and technical improvements.

## Required Qualifications

• 2+ years of penetration testing, Red Team, vulnerability research, or related experience.
• Understanding of common attack techniques and penetration testing methodologies.
• Experience with at least one of web, API, network, or operating system security.
• Ability to read source code and perform vulnerability analysis.
• Proficiency in Python or another programming or scripting language.
• Understanding of networking fundamentals and basic packet analysis.

## Preferred Qualifications

• Experience with CTF competitions, vulnerability disclosure, bug bounty programs, or Red Team exercises.
• Experience with Active Directory, lateral movement, or privilege escalation.
• Experience with malware analysis or reverse engineering.
• Knowledge of Windows Internals or Linux Internals.
• Experience researching or bypassing security mechanisms.
• Experience with kernel technologies, ETW, eBPF, or other low-level mechanisms.
• OSCP, OSWE, OSEP, OSED, or equivalent hands-on skills.

You are not expected to have experience across every research domain.