Offensive Product Security Researcher (mediatek)
mediatek San Jose, CA, USA
2024-09-11
Job posting number: #150086 (Ref:MUS120230808000)
Job Description
Description
- Analyze customers security requirements to refine product security development process, baseline, criteria or guideline- Collaborate with product teams and customers/partners to perform internal or external security audits on our commercial products to ensure the security quality
- Respond to product security incidents, coordinate engineering teams and partners to solve security related issues
- Work with cross teams to perform products' Threat and Risk Assessment (TARA) or threat modeling and give security advices on security design
Salary range: $170,000 - $258,000
Employee may be eligible for performance bonus, short and long term incentive programs. Actual total compensation will be dependent upon the individual's skills, experience and qualifications. In addition, MediaTek provides a variety of benefits including comprehensive health insurance coverage, life and disability insurance, savings plan, Company paid holidays, Paid time off (PTO), Parental leave, 401K and more.
MediaTek is an Equal Opportunity Employer that is committed to inclusion and diversity to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.
Requirements
- BS or above degree in Computer Engineering, Computer Science, or Electrical Engineering- 7+yrs of relevant work experience
- Knowledge of cryptographic methods and algorithms
- Knowledge of embedded system architecture and security (e.g. Android/Linux, ARM trust zone, hypervisor/virtualization, etc)
- Knowledge of hardware/software vulnerabilities and their exploit techniques
- Experience with customers or partners collaboration
- Experience with security design review or threat modeling throughout hardware to software
- Experience with secure code review, analysis, vulnerability assessment, hacking/attack analysis
Preferred Requirement:
- ISO21434 or ISO 26262 compliance experience
- TARA or HARA methodology and execution experience
- CACSE (Certified Automotive Cyber-Security Expert) certificate
- CACSP (Automotive Cyber-Security Professional) certificate