Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 1581 days ago

Security Engineer (Red Teaming/Penetration Testing), Cymetrics

AIFT26 open roles

Where
Remote/ Taipei, Taiwan
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Engineer (Red Teaming/Penetration Testing), CymetricsAIFT · Remote/ Taipei, Taiwan

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on AIFT's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.1% of postings close within 7 days. Measured by our own scanner across the market. AIFT postings stay open a median of 56 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.1%7 days
  4. 21.1%14 days
  5. 35.7%30 days
  6. 58.7%60 days
This job: posted 1581 days ago

AIFT median: 56 days open

The posting

Cymetrics 是亞洲領先的資安原廠之一，擁有專屬的高端資安產品。我們提供專業的紅隊演練、滲透測試和弱點掃描服務，集結了工程技術與資安專長的團隊。

團隊成員均擁有資安風險管理和滲透測試的專業知識，具有在四大管理顧問公司、領導資安服務商、知名品牌原廠的豐富經驗，且積極參與國際 CTF 競賽，並曾取得世界第三名。我們服務的客戶來自不同產業，包括政府、金融、製造業、高科技和電子商務等等。我們團隊也協助集團獲得 ISO 27001 和 ISO 27017 認證，強化集團資安治理。團隊的核心價值在於創新、專業和協作，以提供高效的資安解決方案。

身為 Cymetrics 的資安工程師，你會擔任紅隊演練、滲透測試的主要攻擊手，深入挖掘弱點，並一同與 Mid, junior level 的夥伴一起完成專案。在自有開發的產品中提供專業的想法與意見。一起討論並優化專案執行的成效。

Know more about Cymetrics: https://cymetrics.io/zh-tw/

TechBlog: https://tech-blog.cymetrics.io/

How to apply

Please apply for this position through 👉 https://grnh.se/bfdfcf844us

It will help us process your applications faster!

Our Product

我們的資訊安全團隊 Cymetrics，專注於提供全面的資安評估 SaaS 平台。團隊成員均擁有資安風險管理和滲透測試的專業知識，具有在四大管理顧問公司、台灣領導資安服務商、知名品牌原廠的豐富經驗，且積極參與國際 CTF 競賽，並曾取得世界第三名，2024 年更獲得知名藍隊競賽 HITCON CYBER RANGE 第一名佳績。我們服務的客戶來自不同產業，包括政府、金融、製造業、高科技和電子商務等等。我們團隊也協助集團獲得 ISO 27001 和 ISO 27017 認證，強化集團資安治理。團隊的核心價值在於創新、專業和協作，以提供高效的資安解決方案。

Responsibilities

  • 規劃以及執行紅隊演練、滲透測試，協助客戶發現漏洞並進行改善且驗證修復結果。
  • 與客戶進行專案會議，開會溝通，釐清並協助客戶解決問題。
  • 協助自動化資安工具開發，與軟體工程團隊一同完成自有 SaaS 產品。
  • 與產品開發團隊合作，協助改進資安產品及平台。
  • 研究網站或開源專案漏洞，將研究結果寫成文章發佈至公司的技術文章部落格。

Requirements

  • 三年以上紅隊演練、滲透測試，善於對內部網路橫向移動與滲透。
  • 對現代 Web 框架（如React, Angular, Vue.js）和客戶端安全弱點（例如XSS, CSRF, CSP bypass, GraphQL等）理解，並熟悉其背後原理。
  • 熟悉 OWASP 測試指南和其他安全測試方法，對網頁漏洞、作業系統、網路架構有深入理解，並熟悉其背後原理。
  • 能夠清晰地整理和撰寫測試結果及修補建議，並有效地與團隊和客戶溝通。

Plus

  • 對區塊鏈相關的資安技術有興趣
  • 有打過知名廠商 bug bounty 或是參加過國際 CTF 的經驗 (或有同等 CVE 弱點)
  • 擁有 OSWE、OSEP 或 OSCP 證照 (或其它同等資訊安全證照)
  • 擅長撰寫資安相關之技術文章（漏洞研究、CTF writeup 等等）
  • 參與過開源項目，展現對安全社群的貢獻和合作精神。
  • 流利的中英文聽說能力，並與客戶講解滲透測試報告內容。

Cymetrics is one of the leading cybersecurity solution providers in Asia, offering exclusive high-end cybersecurity products. We specialize in professional red teaming, penetration testing and vulnerability scanning services, assembling a team with engineering expertise and cybersecurity specialization.

Team members possess professional knowledge in cybersecurity risk management and penetration testing, with extensive experience in major consulting firms, leading cybersecurity service providers, and renowned brand OEMs. They actively participate in international CTF (Capture The Flag) competitions, achieving top three places globally. Our clientele spans diverse industries, including government, finance, manufacturing, high-tech, and e-commerce, among others. Additionally, our team assists the group in obtaining ISO 27001 and ISO 27017 certifications, reinforcing the group's cybersecurity governance. The core values of our team lie in innovation, professionalism, and collaboration, aiming to deliver efficient cybersecurity solutions.

As a Cybersecurity Engineer at Cymetrics, you will serve as the primary attacker in red teaming and penetration testing, deeply probing vulnerabilities, and collaborating with mid and junior-level partners to complete projects. You will contribute professional insights and opinions to our proprietary product development, engaging in discussions to optimize project execution effectiveness.

Know more about Cymetrics: https://cymetrics.io/en-us/

Tech Blog: https://tech-blog.cymetrics.io/

Our Product

Our cybersecurity team, Cymetrics, is committed to providing a comprehensive cybersecurity assessment SaaS platform. With expertise in risk management and penetration testing, our team includes professionals from Big 4 consulting, leading cybersecurity services provider global banks, and top cybersecurity firms. Cymetrics excels in international CTF competitions, achieving a top-three global ranking and securing 1st place in the prestigious 2024 HITCON Cyber Range blue team. competition. Cymetrics supports clients across government, finance, manufacturing, high-tech, and e-commerce sectors. We’ve also secured ISO 27001 and ISO 27017 certifications for our group. Focused on innovation and collaboration, Cymetrics provides an AI security and LLM verification platform to assess AI models for vulnerabilities and Responsible AI compliance.

Responsibilities

  • Planning and executing redteam project and penetration tests, aiding clients in identifying vulnerabilities, verifying remediation, and validating fix outcomes.
  • Conducting project meetings with clients, engaging in effective communication, clarifying issues, and assisting clients in problem resolution.
  • Assisting in the development of automated security tools, collaborating with the software engineering team to complete proprietary SaaS products.
  • Collaborating with the product development team to enhance cybersecurity products and platforms.
  • Researching vulnerabilities in websites or open-source projects and documenting findings in articles published on the company's TechBlog.

Requirements

  • Three or more years of practical experience in red teaming, penetration testing and lateral movement in internal networks.
  • Familiarity with modern web frameworks (such as React, Angular, Vue.js) and client-side security vulnerabilities (e.g., XSS, CSRF, CSP bypass, GraphQL).
  • Familiarity with OWASP testing guides and other security testing methodologies, with a deep understanding of web vulnerabilities, operating systems, network architecture, and underlying principles.
  • Ability to articulate and document test results, provide remediation suggestions clearly, and effectively communicate with teams and clients.
  • Fluency in spoken and written English to explain penetration test reports to clients.

Plus

  • Interest in blockchain-related cybersecurity technology.
  • Experience in bug bounty programs from reputable companies or participation in international CTFs (or equivalent CVE vulnerabilities).
  • Possession of OSWE, OSEP or OSCP certifications (or other equivalent information security certifications).
  • Proficiency in writing technical articles related to cybersecurity (vulnerability research, CTF write-ups, etc.).
  • Involvement in open-source projects, demonstrating contributions to and collaboration within the security community.
  • Fluency in spoken and written Chinese.

How to apply

Please apply for this position through 👉 https://grnh.se/bfdfcf844us

It will help us process your applications faster!

Interview process

  • Phone interview (30mins)
  • Interview (1.5 hrs) : - 45 mins with Team Members - 30 mins with Hiring Managers, 15 mins with HR

公司福利

好好工作，好好休息 (正職員工適用)

  • 加入第一天即享有年假，首年 15 天年假（依照入職比例發）
  • 每年全薪病假 5 天、全薪生理假 3 天

一起成長，持續精進

  • 參加 conference、外部訓練都有補助 (正職員工適用)
  • 證照補助 (正職員工適用)
  • 前、後端技術分享社團、產品與管理職能讀書會

努力工作，我們也用力生活

  • 健康檢查補助 (正職員工適用)
  • 社團補助 - 各種運動社團、桌遊社、電玩社、這週要幹嘛社
  • 定期補充的零食以及飲料櫃、義式咖啡機、氣泡水機
  • 舒適的開放式工作環境，距離捷運台北101站 5分鐘路程
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against AIFT's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on AIFT's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    AIFT's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.