PCI硬件安全测试工程师

该职位来源于猎聘 【任职要求】 PCI安全工程师-硬件方向，需要按标准要求进行物理安全测试和物理攻击方案规划。有PCI-PTS物理评估经验或POS机硬件安全方案设计经验者优先。 The PCI Security Engineer (Hardware Focus) is required to conduct physical security testing and devise physical attack scenarios as per standard requirements. Candidates with experience in PCI-PTS physical evaluations or POS terminal hardware security solution design is a plus.

• 根据金融POS行业安全标准（如PCI-PTS等）对金融POS产品的硬件进行安全测试。
• Conduct security testing on the hardware of financial POS products against dedicated security standards (e.g., PCI-PTS). 【任职要求】
• 大专以上学历，专业不限，主要看技能。
• 要求具备较好的动手能力。
• 基本的嵌入式系统软硬件调试和编程技能。
• 熟悉常见的加密算法原理和应用。
• 具备终端产品硬件安全、和/或物联网（IoT）方面的经验。
• 良好的英语水平（书面和口语），普通话为母语水平。
• 善于沟通和团队协作。
• College degree or above, no limitations to major.
• Good hands-on skills are required.
• Basic debugging and programming skills for embedded system software and hardware.
• Familiar with the principles and application of cryptographic algorithms.
• Experience in hardware security of terminal products and/or Internet of Things (IoT).
• Good at English (written and spoken), with native-level Mandarin.
• Strong communication and teamwork skills. Technical Skills
• 能看懂并分析电路原理图。
• 熟练使用示波器、万用表、信号发生器等测试和信号采集设备。
• 具备硬件电路调试技能，会使用电烙铁、拆焊台等进行电路改装和修复。
• 熟悉至少一款嵌入式芯片的特性和典型应用。
• 了解AES、TDES、RSA、ECC等密码学算法的典型应用。
• 熟悉软件真实性和完整性验证的原理和方法。
• 了解金融POS机的软件和硬件保护原理。
• 了解故障注入、模糊测试等基本原理和方法。
• 熟悉产品开发和生产过程的安全管控措施及过程文档审核。
• 能读懂C语言编写的代码，会使用C语言或Python编程更佳。
• Ability to analyze circuit schematics.
• Proficient in using testing and signal acquisition equipment such as oscilloscopes, multimeters, and signal generators.
• Possess hardware circuit debugging skills, capable of circuit debugging and repair using soldering irons and reverse-engineering stations.
• Familiar with the characteristics and typical applications of at least one embedded chip.
• Understanding of the typical applications of cryptographic algorithms such as AES, TDES, RSA, and ECC.
• Familiar with the principles and methods of software authenticity and integrity verification.
• Understanding of the protection principles for software and hardware in financial POS terminals.
• Knowledge of basic principles and methods such as fault injection and fuzzing.
• Proficient in C language, able to read code written in C, and skilled in programming with C or Python is preferred.