About this role
We are Lenovo. We do what we say. We own what we do. We WOW our customers.
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).
This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com (https://www.lenovo.com), and read about the latest news via our StoryHub (https://news.lenovo.com/).
岗位职责：
1. 学习联想的流程、标准，对Web、API、云服务等类型的产品进行渗透测试，发现产品中存在的安全问题；
2. 针对不同的漏洞，输出漏洞的解决方案，指导并协助产品线修复安全漏洞；
3. 识别发现联想现有产品审核流程、标准中的不足，并提出有效的建议帮助完善流程、标准；
4. 对产品线团队进行安全赋能支持，包括培训、CI/CD流程优化等安全左移建设工作，支持联想的安全左移战略；
5. 参与构建AI驱动的安全体系建设，包括AI渗透测试、AI代码审计、AI威胁建模等。
岗位要求：
1. 5年以上安全从业经验；
2. 精通常见WEB或云服务漏洞的利用手法、漏洞原理及修复方案；
3. 了解AI Agent开发，熟练使用AI编程应用；
4. 熟练使用各种渗透测试工具并对其原理有较深入的了解；
5. 具有一定的英文阅读、写作和邮件沟通能力；
6. 良好的沟通能力和团队协作能力，有主动发现问题、解决问题的意识；
加分项：
1.具备CISSP\CCSP\CKS等相关证书者优先；
2.参加过大型CTF比赛并取得优异成绩者；
3.开发过AI渗透测试工具；