【上海 Cyber Security Tester (MJ018722)招聘】-施耐德电气上海招聘信息-猎聘

肖女士 2天前在线已认证

招聘专员 · 施耐德电气

聊一聊

职位介绍: Job Responsibilities · Review product cybersecurity requirements, customer specifications, and applicable industry standards to ensure compliance with cybersecurity objectives throughout the product lifecycle. · Develop comprehensive cybersecurity test plans, test cases, and validation strategies based on product requirements, security risk assessments, and certification requirements. · Design, set up, and maintain cybersecurity test environments for industrial control systems, protection relays, RTUs, PLCs, gateways, communication devices, and related configuration tools. · Execute cybersecurity testing activities, including: o Understand threat modeling o Vulnerability assessment and scanning o Penetration testing o Fuzz testing o Authentication and authorization testing o RBAC (Role-Based Access Control) verification o Network protocol security testing o Secure communication validation o Device hardening verification o Security robustness and resilience testing Evaluate compliance with cybersecurity standards and certification requirements, including IEC 62443, IEC 62351, and other relevant industrial cybersecurity frameworks. Analyze network traffic, communication protocols, and security events using cybersecurity and packet analysis tools, and identify security risks and vulnerabilities. Record, reproduce, and track defects or vulnerabilities discovered during testing, working closely with R&D teams to support root cause analysis and corrective actions. Produce cybersecurity validation reports, vulnerability assessment reports, and certification evidence packages for internal and external stakeholders. Support third-party cybersecurity certification activities, including laboratory testing, audits, technical reviews, and certification evidence submissions. Collaborate with system architects, developers, validation engineers, and product managers to improve security-by-design practices and overall product robustness. Keep up to date with emerging cybersecurity threats, industrial cybersecurity standards, testing methodologies, and security tools to continuously improve product security and test effectiveness. Job Requirements Education Bachelor's degree or above in Cyber Security, Electrical Engineering, Power Systems, Computer Science, Information Security, or a related discipline. Experience Minimum 5 years of experience in cybersecurity advisor, testing, validation, certification, product security, or related engineering roles. Experience with industrial automation, power systems, protection and control devices, intelligent electronic devices (IEDs), is highly desirable. Experience in industrial product cybersecurity certification or cybersecurity testing is preferred. Experience supporting third-party certification laboratories, security audits, or compliance assessments is a plus. Technical Skills Strong understanding of industrial cybersecurity standards, especially IEC 62443 family standards and CRA requirements. Familiarity with related standards such as IEC 62351, NERC CIP, Marine E27 or similar cybersecurity frameworks is an advantage. Solid knowledge of TCP/IP networking, OSI model, Ethernet technologies, routing, switching, and industrial communication architectures. Familiar with industrial communication protocols is preferred. such as: IEC 61850/ IEC60870-5-104/ Modbus/ DNP3/ OPC UA/ MQTT Security Testing Tools Hands-on experience with one or more of the following cybersecurity tools: Vulnerability scanners (Nessus, OpenVAS, Qualys, etc.) Penetration testing tools (Kali Linux, Metasploit, Burp Suite, Nmap, etc.) Industrial cybersecurity assessment tools (Achilles Test Platform or equivalent) Protocol and packet analysis tools (Wireshark, tcpdump) Fuzz testing tools Security log analysis and monitoring tools Automation & Scripting Proficiency in Python or other scripting languages for security test development, data analysis, and automation. Personal Attributes Strong analytical and problem-solving skills with a security-oriented mindset. Good communication and documentation skills in English. Ability to work independently and collaboratively within cross-functional international teams. Self-motivated with a passion for continuous learning in cybersecurity and industrial technologies. Preferred Qualifications Professional cybersecurity certifications such as GICSP, CISSP, IEC 62443 Cybersecurity Expert, or equivalent. Experience with cybersecurity certification programs such as IEC 62443 certification, Achilles Certification, or equivalent industrial security schemes.

其他信息: 语言要求：英语、普通话; 行业要求：全部行业

公司简介

施耐德电气的宗旨，是通过赋能所有人最大化利用能源和资源创造影响力，推动人类进步与可持续的共同发展。我们的使命是成为您实现高效和可持续发展的可信赖伙伴。我们将电气化、自动化和数字化技术应用于智慧工业、具有韧性的基础设施、面向未来的数据中心、智能楼宇以及数智家居中。依托于丰富的行业专长，我们提供AI赋能的端到端全生命周期工业物联网解决方案，涵盖互联互通的产品、自动化、软件和服务，并采用跨平台的产业数据基座和“数字孪生”，助力客户实现盈利性增长。我们是一家以人为本的企业，拥有15万名员工、逾百万的合作伙伴、业务遍布全球100多个国家。我们庞大的生态圈能够确保贴近每一个客户和利益相关方的需求。我们遵循有意义的企业宗旨，拥抱多样性和包容性，为全人类的可持续未来持续努力。

查看全部

猎聘温馨提示：

1. 如您发现平台内招聘方存在以下违规行为的，请立即举报

· 扣押您的身份证件或者其他证件；
· 要求您提供担保人、担保金或者以其他名义向您收取财物（如培训费、体检费、资料费、置装费、押金等）；
· 强迫您入股或者向您集资；
· 以招聘名义牟取不正当利益；
· 发布虚假招聘广告信息；
· 工作时长违反劳动法规定；
· 存在其他损害您的合法权益的行为。

2. 如您应聘的岗位属于涉外劳务合作/海外岗位的，请务必核实招聘方对外劳务合作资质取得情况，同时注意自身资金安全，防范招聘欺诈。

了解更多安全防范知识>

3. 本平台招聘方不向求职者提供任何收费服务。

查看全部

猜你喜欢

胡女士

招聘经理

汽车零部件及配件融资未公开 500-999人

胡女士

HR-Recruiting

Network Security Associate Director (MJ007466)

唐女士

Senior Recruitment Supervisor

Risk Expert, 沃尔玛网络安全DLP漏洞管理

【上海-闵行区】

30-50k·13薪

Walmart International

专业技术服务融资未公开 1000-2000人

颜女士

招聘专员

云计算/大数据融资未公开 100-499人

杨先生

姚女士

专业技术服务不需要融资 1000-2000人

杨女士

招聘HR

Cybersecurity Analyst 网络安全分析师

黄女士

招聘主管

赵女士

招聘经理

KERING Cybersecurity Project Manager, Greater China (MJ000378)

王女士

HRBP

袁女士

资深项目工程师，网络安全测试-上海 ID206186

【上海-静安区】

16-30k

TÜV南德意志集团

检测/认证融资未公开 2000-5000人

张女士

人力资源

IT网络安全组研发及运维安全岗 ID213626

王先生

沈先生

人事管理师

信息安全工程师 - Insider Risk

郑女士

TA Partner

电子/半导体/集成电路战略融资 2000-5000人

王先生

招聘主管

赵女士

招聘HR

Cybersecurity Supplier Assessor

刘女士

senior recruiter

Information Security Manager

钱女士

HRBP

AI安全工程师（权限 / 脱敏 / 审计）

杨女士

hrbp

1 2 3 4

公司信息

施耐德电气

关注

企业行业：电气机械/器材

融资阶段：其他股票市场上市

人数规模： 10000人以上

职位地址：上海-浦东新区施耐德电气(中国)有限公司

注册资本： 32234.02万人民币

经营范围：一般项目：以自有资金从事投资活动；自有资金投资的资产管理服务；企业管理；机械电气设备销售；电气设备销售；微特电机及组件销售；电力电子元器件销售；电子元器件批发；智能仪器仪表销售；仪器仪表销售；电工仪器仪表销售；电力设施器材销售；电器辅件销售；先进电力电子装置销售；配电开关控制设备销售；智能输配电及控制设备销售；工业自动控制系统装置销售；工业控制计算机及系统销售；伺服控制机构销售；数控机床销售；金属结构销售；金属材料销售；金属制品销售；五金产品零售；五金产品批发；电子产品销售；计算机软硬件及辅助设备批发；计算机软硬件及辅助设备零售；通讯设备销售；移动通信设备销售；安防设备销售；消防器材销售；软件销售；货物进出口；技术进出口；采购代理服务；贸易经纪；销售代理；进出口代理；离岸贸易经营；国内贸易代理；普通货物仓储服务（不含危险化学品等需许可审批的项目）；国内货物运输代理；通用设备修理；电气设备修理；仪器仪表修理；专用设备修理；普通机械设备安装服务；电子、机械设备维护（不含特种设备）；工程管理服务；软件外包服务；包装服务；机械设备租赁；办公设备租赁服务；非居住房地产租赁；租赁服务（不含许可类租赁服务）；配电开关控制设备研发；电机及其控制系统研发；电力行业高效节能技术研发；机械设备研发；工业工程设计服务；工业设计服务；工程和技术研究和试验发展；网络与信息安全软件开发；软件开发；人工智能应用软件开发；计算机系统服务；信息系统集成服务；智能控制系统集成；信息系统运行维护服务；物联网技术服务；数据处理和存储支持服务；集成电路设计；技术服务、技术开发、技术咨询、技术交流、技术转让、技术推广；合同能源管理；互联网销售（除销售需要许可的商品）；运行效能评估服务；节能管理服务；市场营销策划；信息咨询服务（不含许可类信息咨询服务）；咨询策划服务；企业管理咨询；社会经济咨询服务；信息技术咨询服务；工程技术服务（规划管理、勘察、设计、监理除外）；安全咨询服务；互联网安全服务；物联网应用服务；物联网技术研发；物联网设备销售；人工智能基础软件开发；人工智能行业应用系统集成服务；人工智能基础资源与技术平台；人工智能通用应用系统；储能技术服务；企业总部管理；控股公司服务。（除依法须经批准的项目外，凭营业执照依法自主开展经营活动）（不得从事国家和本市产业政策禁止和限制类项目的经营活动。）

数据来源：