【TIR ｜ Vulnerability Hunting】弱點情資研究員 Vulnerability Intelligence Researcher

【團隊介紹】
Threat Intelligence Research 團隊專注於全球網路威脅與 APT 研究，透過長期追蹤攻擊組織、惡意程式及攻擊手法，從大量資訊與線索中挖掘未知威脅。團隊將研究成果與實戰經驗轉化為 ThreatSonar 與 ThreatVision，持續提升威脅視野與防禦能力，讓看不見的威脅變得可見、可理解、可防禦。

【我們的期望】
我們正在尋找一位具備資安研究能力的弱點研究員，負責將漏洞利用程式轉換為內部弱點掃描模板，同時分析漏洞與後門協定。
理想人選需具備漏洞分析與惡意程式通訊協定分析能力。

【工作內容】
・分析及復現漏洞 PoC，並轉換為檢測規則或模板
・研究與驗證新揭露漏洞（N-day 及潛在 0-day）
・分析 Webshell與後門行為，萃取入侵指標（IoC）
・進行惡意程式及通訊協定分析
・與內部團隊合作，提升偵測率與準確度
・撰寫情資與威脅狩獵報告。

【必要條件】
・具備 PoC 分析與漏洞利用開發或分析經驗
・熟悉至少一種程式語言（如 Python、Go、C/C++、JavaScript）
・了解 Webshell 與後門技術與行為特徵
・熟悉網路協定（HTTP、TCP/IP），並能分析自訂惡意通訊協定

【加分條件】
・具備弱點掃描器或 IDS/IPS 規則開發經驗
・曾發表資安研究、申請 CVE 或參與研討會分享
・具備逆向工程能力（如使用 IDA Pro、Debugger 等工具)

【軟實力】

• 良好的分析與問題解決能力
• 能獨立作業並清楚表達研究成果
• 對資安研究具備高度熱忱並持續關注最新威脅趨勢

------------------------------------------------------------------------------------------

【Job Overview】
We are seeking a skilled Vulnerability Intelligence Researcher with a strong background in cybersecurity research. This role focuses on transforming exploit code into internal vulnerability scanning templates, while also analyzing vulnerabilities and backdoor communication protocols. The ideal candidate should possess strong capabilities in vulnerability analysis and malicious protocol analysis.

【Key Responsibilities】
・ Analyze and reproduce vulnerability PoCs, and convert them into detection rules or scanning templates
・Research and validate newly disclosed vulnerabilities (N-days and potential 0-days)
・ Analyze webshell and backdoor behaviors to extract Indicators of Compromise (IoCs)
・Perform malware and communication protocol analysis
・ Collaborate with internal teams to improve detection coverage and accuracy
・Write threat intelligence and threat hunting reports

【Required Qualifications】
・ Experience in PoC analysis and vulnerability exploit development or analysis
・Proficiency in at least one programming language (e.g., Python, Go, C/C++, JavaScript)
・Understanding of webshell and backdoor techniques and behavioral characteristics
・Solid understanding of network protocols (HTTP, TCP/IP) and the ability to analyze custom malicious communication protocols

【Preferred Qualifications】
・ Experience in vulnerability scanner or IDS/IPS rule development
・ Experience publishing security research, obtaining CVEs, or presenting at security conferences
・Reverse engineering experience (e.g., using IDA Pro, debuggers, or similar tools)

【Soft Skills】
・Strong analytical and problem-solving skills
・ Ability to work independently and clearly communicate research findings
・ Passion for cybersecurity research and staying up to date with emerging threats