大家好，我们是 Circle
Circle 是全球前三大美元稳定币 USDC 的发行商，在去年并购了台湾区块链新创 CYBAVO
CYBAVO 是区块链数位资产安全管理的领导品牌，专注于建立以身份认证为基础的企业用
加密货币金库。目前台湾知名的加密货币交易所，如 Max, BitoPro, ACE, 数宝, XREX
等，都用 CYBAVO 的加密货币金库来保管该交易所的加密货币。
在 Circle，以人为本是我们的核心文化。为了帮助员工成长，我们打造了一个重视团队
合作、极具向心力的工作环境，以及鼓励创意思考与开放沟通的公司文化。如果你也对区
块链技术抱持热情、向往在 Web3 产业发挥影响力，加入我们，一起打造世界级的产品！
职缺重点
- 技术关键字：Python、Penetration tests、AWS、Automated security testing
- 薪资范围：底薪 200 - 300 万 一年，还会有绩效奖金及 RSU 股票
- 工作地点：混合工作模式，可以在家上班，也可以到信义区去年才装潢好的办公室吹冷
气
面试流程
- HR 面试
- 主管面试（英文）
- 技术面试（英文）
- 跨 Team 面试
- Senior Director 面试（英文）
其他补充
- 工作语言：语言使用上中英大概各半，因为这个职位会直接 report 到美国的 Product
Security Director，也会与台湾的工程师及 PM 团队密切合作。
- 工作时间：工作时间弹性，以能与团队顺畅沟通、协同合作达成目标为主，也要有心理
准备需要晚上跟美国同事开会（差 12 -15 个小时）
—-
公司名称
博欧科技有限公司
公司地址
台北市信义区菸厂路88号8楼之1 (50759458)
公司网址
https://www.circle.com/en/
薪资（年薪）
底薪 200 万 - 300 万，还会再加上 Bonus 及 RSU
薪资（保证最低年薪，必填项目）
14 个月
年终奖金计算方式
依据绩效考核成绩
工作内容
- Work with the product management and software engineering teams during all p
hases of the SDLC to ensure that applications are designed and implemented sec
urely.
- Test web applications and the underlying systems for vulnerabilities using b
oth tools and manual techniques; manage the remediation of findings through re
solution.
- Recommend code changes to eliminate vulnerabilities.
- Automate security tests within the CI/CD pipeline.
- Help develop secure coding standards and training materials based on finding
s seen in Circle’s environment to empower engineers to write more secure code
.
- Research vulnerabilities specific to blockchain technologies and incorporate
this knowledge into current practices.
- Serve as an escalation point to investigate security alerts and identify inc
idents.
- Investigate vulnerability reports related to Circle products and services.
- Manage vendors to conduct penetration tests and other security-related proje
cts.
- Influence continuous improvement of the application security program.
- Support other security team projects such as threat modeling, vulnerability
scanning and audits.
职缺能力经历要求
- 7+ years of total experience in a Security role.
- 3+ years of experience as a security engineer that has been leading projects
and developing resolutions in cybersecurity.
- Enthusiasm for securing and breaking software.
- Experience with common attack techniques and conducting penetration tests.
- Experience designing software security features including, but not limited t
o, access control features, logging and monitoring features, input validation
and session management.
- Experience automating security tests in cloud based CI/CD pipelines.
- Experience working with SAST and DAST testing processes and tools.
- Working knowledge of public and private key cryptography.
- Familiarity with techniques for making software robust against common attack
s.
- Self-motivated and creative problem solver able to work independently with m
inimal guidance.
- Strong ability to work collaboratively across teams.
- Ability to manage multiple competing priorities and use good judgment to est
ablish priorities on the fly.
- Experience working in financial services or financial technology desired.
- Bachelor's degree in computer science, computer engineering, cyber security
or related field. Equivalent experience is also accepted.
- Certifications such as CISSP, CEH or similar will receive favorable consider
ation but are not required.
- Experience working on applications deployed within AWS highly desired.
- Experience with at least several of the following is required: Java, GoLang,
Angular JS, Rest API’s, JSON, Python or GraphQL.
- Experience with application development on iOS and/or Android is preferred b
ut not required.
- Fluency in English and Mandarin is required.
详细内容请参照职缺连结：https://bit.ly/42nXUx6
工时
8 小时，可自行安排工作时间
每周工作时间
8*5=40
加班费制度
加班费计算方式比照劳动基准法办理
员工是否需自备工具
不需要，公司提供 Macbook Pro、Herman Miller 人体工学椅、电动升降桌、27 吋大萤
幕
工作福利
- 远端优先的混合上班模式
- 区块链产业专业培训
- 弹性有薪假期（基本上不限制休假天数，只要与主管达成共识即可）
- 内部推荐奖金十万台币
- 优于业界的员工团保
- 健康检查补助
- 居家办公室设备补助
- 每月电话费津贴
请直接在职缺网页投履历，如果有问题也欢迎寄信聊聊