You are viewing a preview of this job. Log in or register to view more details about this job.

Product Security Test Engineer I (Ethical Hacker)

Why Work at Lenovo
Here at Lenovo, we believe in smarter technology that builds a brighter, more sustainable and inclusive future for our customers, colleagues, communities, and the planet.

And we go big. No, not big—huge.

We’re not just a US$70 billion revenue Fortune Global 500 company, we’re one of Fortune’s Most Admired. We’re transforming the world through intelligent transformation, offering the world’s most complete portfolio of smart devices, infrastructure, and solutions. With more than 71,500 employees doing business in 180 markets, we help millions—not just the select few—experience our version of a smarter future.

The one thing that’s missing? Well… you...

Lenovo Infrastructure Solutions Group (ISG) is a smart infrastructure solutions provider to organizations of all sizes. We are looking for eager and passionate recent college graduate to join our organization and help us fulfill our mission to be the most trusted data center partner - Empowering customers’ Intelligent Transformation, and solving humanity’s greatest challenges.

We are seeking a qualified candidate to join the Software Security Review Board (SSRB) team as a Product Security Test Engineer I (Ethical Hacker). The SSRB is dedicated to enhancing the security of Lenovo ISG products for our customers. Projects will include configuring security test targets such as servers, storage, and networking environments; performing product security assessments; creating assessment reports; and working with global product teams to review assessment results. The successful candidate will be prepared to work in a fast-paced team environment, have a healthy curiosity, and a passion for learning about security and infrastructure technology.

Key Responsibilities
• Work with global product teams to understand and effectively perform security assessments of their products
• Setup and configure products as security test targets
• Setup, configure, and use security test tools to perform SSRB security assessments
• Document security assessment findings and recommendations
• Work with global product teams to review security assessment findings and recommendations
• Develop security assessment tool assessment profiles
 • Develop or enhance documentation and training materials
• Participate in security research and process enhancements

Requirements
• Bachelor’s degree or greater in Information Systems Security, Information Assurance, Cybersecurity, Information Systems, Computer Science, or similar field
• Understanding of security concepts such as: application security, authentication, authorization, encryption, input validation, least privilege, XSS
• Conceptual understanding of networking, how web applications work, and how clients and applications communicate
• Familiarity and, ideally, experience with one or more security tools such as: Burp Suite, CHIPSEC, Kali, nmap, Nessus, Metasploit, ZAP
• Experience with Linux and Windows operating systems
• Good written and verbal communication
• A self-starter, problem solver, and consummate learner who can effectively work independently or as part of a team to tackle new technologies and challenges Desired
• Hands-on security assessment experience
• Experience working with global teams

What We Will Offer You:
Your experience working for ISG at Lenovo will be exciting, innovating, and challenging. The ISG commitment to PeopleFirst is focused on Employee Experience, Leadership, and One Team, all driving operational excellence and providing you supportive resources to launch your professional career.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any federal, state, or local protected class.

Lenovo adopted a COVID-19 Vaccination Policy for US-based employees. As a condition of employment, employees must adhere to Lenovo’s US Vaccination Policy and be fully vaccinated against COVID-19, subject to any applicable accommodations. To be fully vaccinated means individuals must receive the full series of a vaccine either approved by the FDA or WHO and listed by the CDC (e.g. two dose of the Moderna, AstraZeneca or Pfizer-BioNTech vaccines; or one dose of the Johnson & Johnson vaccine). This applies to all US-based employees, contractors and interns, regardless of work location. As a condition of employment, you must provide proof that you are fully vaccinated or follow Lenovo’s accommodation process.