Senior Expert - Security Engineering

Job description

Huawei's Heisenberg Research Center (Munich) is responsible for advanced technology research, architectural development, design and strategic engineering of our products. Huawei Vulnerability Management Center (PSIRT) was founded and accepted as a member of the Forum of Incident Response and Security Teams (FIRST) in 2010. It has established a vulnerability response process in compliance with ISO/IEC 29147 and ISO/IEC 30111. PSIRT is a dedicated team that receives, investigates, and discloses security vulnerabilities in Huawei products and solutions and is an important vulnerability disclosure window. PSIRT is responsible for vulnerability management during the Group's deep dive into digital transformation and new business. It builds an end-to-end (E2E) vulnerability governance and capability system and an open vulnerability management ecosystem, implements vulnerability management requirements under the company's diverse business structure to meet stringent external requirements, and ensures that product security capabilities can be translated into competitiveness. PSIRT is expanding to be responsible for cyber security and privacy protection process and engineering capability development to support Huawei’s overall E2E cybersecurity assurance framework. Join us as a Senior Expert - Security Engineering (m/f/d) Your mission Be responsible for the business planning of the security engineering capabilities to support Huawei’s overall E2E cybersecurity assurance framework, including gaining deep insights into industry state-of-the-art and bleeding-edge developments (industry trends), gaining insights on regulations, standards and certification requirements on security engineering, developing and applying advanced security engineering methods and technologies, ensuring that the security engineering governance supports the overall E2E cybersecurity assurance framework ands meets regulatory and customers’ requirements, and ensuring that the effective application of security engineering methods can be demonstrated to prove compliance to regulatory and customers’ requirements. Develop and maintain policies, procedures and standards for security engineering governance in accordance with industry best practices and regulatory requirements. Actively promote the international standardization of advanced security engineering methods and their testing methodology to advance the trustworthiness of information and communication systems in the industry. Gather insights, identify Huawei's gaps in security engineering, actively promote security engineering methods, and build trust, including through external events at academic and industry conferences, and with customers and regulators. Support the development of the company's security engineering ecosystem with the academia and industry: identify ecosystem partners and, where relevant, drive collaboration or cooperation initiatives with partners on advanced security engineering topics. Your areas of expertise Master's or PhD degree in cyber security, information security, computer application, or other related majors is preferred, with outstanding technical contributions or professional achievements At least 15 years of experience in cybersecurity engineering, product security, security governance or related fields. Have an in-depth understanding of network security technology principles. Be proficient in one or more security technologies, such as cryptography application, identity authentication and access control, integrity protection, data security, vulnerability exploitation prevention, security audit, situational awareness, and privacy protection. Experience in AI security engineering is preferred, including AI threat modeling, AI vulnerabilities and security events, and AI integrity protection, etc. Knowledge of cyber security and privacy protection process and engineering requirements in CRA, EUCC, RED and other European regulations is preferred. Have in-depth understanding of international standardization system Be familiar with ISO 27034, 27002, and NIST 800-53, 800-160, and 800-161 standards. Have a deep understanding of design, development, build, and test activities and engineering practices related to security engineering. Proficiency in English By applying to this position, you agree with our Recruitment Privacy Statement. You can read in full our privacy policy here . Your rewards of working here Our culture is characterized by innovative power and team spirit as well as the intensive exchange of knowledge and experience within our global network. We offer healthy meals ranging from traditional Chinese to western delicacies in our famous company canteen. To keep your development ongoing, you will find a broad range of training opportunities. Many online and face-to-face training programs incl. language courses in German and Mandarin. Our diverse and welcoming environment is shaped by different backgrounds and around 40 individual nationalities. Self-responsible work in a competent, motivated and constantly growing team. Please send your application and CV (incl. cover letter and reference letters) in English. Huawei is a leading global information and communications technology (ICT) solutions provider. Our ICT solutions, products and services are used in more than 170 countries and regions, serving over one-third of the world's population. With 208,000 employees, Huawei is committed to develop the future information society and build a Better Connected World.