- 类型
- 全职
- 部门
- 医疗保健团队
职责
- 为嵌入式 Linux 平台设计和实现安全架构
- 开发和维护基于 Yocto 的 Linux 发行版,重点在于安全设计
- 实施安全启动、信任根、镜像签名和安全更新机制
- 系统加固(内核、用户空间和服务),减少攻击面
- 集成访问控制、SELinux/AppArmor、安全存储和加密等安全功能
- 开发自动化测试和安全功能验证(如漏洞扫描和合规性检查)
- 为内部开发团队发布和维护安全的软件平台
- 持续进行漏洞管理、补丁修复和集成后事件支持
必备要求
- 具备扎实的嵌入式 Linux 和底层系统软件开发经验
- 精通 Yocto 项目,具备构建定制化、安全 Linux 发行版的经验
- 具备嵌入式或系统级环境中 C/C++ 开发经验
- 具备使用 Python 进行自动化、构建工具和测试的经验
- 熟悉 CI/CD 流水线(如 Jenkins)及其安全集成到构建流程
- 具备嵌入式安全概念(安全启动、TPM/HSM、密钥管理、OTA 更新)的实际操作经验
- 了解漏洞管理(CVE)、补丁程序和长期产品维护
- 能够独立工作并作为团队成员协作,具有高度责任感
- 优秀的英语书面和口头沟通能力
- 计算机科学、软件工程或相关专业学士/硕士学位
Responsibilities
- Design and implement security architecture for embedded Linux platforms
- Develop and maintain Yocto-based Linux distributions with a security-by-design focus
- Implement secure boot, root of trust, image signing and secure update mechanisms
- System hardening (kernel, user space and services) to reduce attack surface
- Integrate security features such as access control, SELinux/AppArmor, secure storage and encryption
- Develop automated tests and security verification (e.g. vulnerability scanning and compliance checks)
- Release and maintain secure software platforms for internal development teams
- Ongoing vulnerability management, patching and post-integration incident support
Must Have
- Solid experience in embedded Linux and low-level system software development
- Proficiency in the Yocto Project and experience building customized, secure Linux distributions
- Experience with C/C++ in embedded or system-level environments
- Experience using Python for automation, build tooling and testing
- Familiarity with CI/CD pipelines (e.g. Jenkins) and securely integrating them into build processes
- Hands-on experience with embedded security concepts (secure boot, TPM/HSM, key management, OTA updates)
- Knowledge of vulnerability management (CVE), patching and long-term product maintenance
- Ability to work independently and as part of a team with a high sense of responsibility
- Excellent written and verbal English communication skills
- Bachelor's/Master's degree in Computer Science, Software Engineering or related field
公司简介
RTX 是一家总部位于丹麦诺勒松比的欧洲公司,专注于无线通信解决方案的创新、设计和制造,业务覆盖企业、医疗保健和专业音频三大领域,在丹麦、香港、罗马尼亚和美国设有办事处,拥有 300 多名员工。公司提供从概念定义、原型设计到量产的全流程定制化端到端解决方案,并进行完整的产品生命周期管理,与全球客户和技术合作伙伴紧密合作。
