Job Description

操作系统安全开发资深工程师/专家上海社招全职数字技术 - 数字安全本科及以上7-10 年职位描述1. 负责面向微内核架构操作系统开展安全分析、故障模式分析及失效传播分析，识别内核、系统服务、IPC 机制、驱动框架、资源管理与隔离边界中的安全风险，并提出相应的安全设计方案。
Conduct safety analysis, failure mode analysis, and fault propagation analysis for microkernel-based operating systems; identify safety risks in kernels, system services, IPC mechanisms, driver frameworks, resource management, and isolation boundaries; and propose corresponding safety design solutions.
2. 负责操作系统安全方案设计与安全机制开发，包括异常检测、故障隔离、降级运行、容错处理、健康监测、故障恢复。
Design safety solutions and develop safety mechanisms for operating systems, including anomaly detection, fault isolation, degraded operation, fault tolerance, health monitoring, fault recovery.
3. 负责构建面向复杂系统 safety 问题的自动化动态测试与验证能力，设计并实施故障注入、异常触发、边界条件覆盖、场景探索与回归验证，并建设基于强化学习、LLM 等智能化方法的测试序列自动生成能力，提升软件安全问题发现效率与测试覆盖深度。
Build automated dynamic testing and validation capabilities for complex system safety issues, including fault injection, anomaly triggering, boundary-condition coverage, scenario exploration, and regression validation, and develop intelligent test-sequence generation capabilities based on reinforcement learning, LLMs, and related methods to improve SW failure discovery efficiency and test coverage depth.
4. 负责从源码、接口定义、配置、构建过程、日志、trace、运行时行为及资源状态中提取系统特征，构建能够表征系统健康度、异常演化和失效趋势的指标体系与结构化知识库，为问题诊断、根因定位、测试生成和修复验证提供支撑。
Extract system features from source code, interface definitions, configurations, build processes, logs, traces, runtime behavior, and resource states, and build metric systems and structured knowledge bases that characterize system health, anomaly evolution, and failure trends to support issue diagnosis, root cause localization, test generation, and remediation validation.职位要求1. 本科及以上学历，计算机、软件工程、自动化、电子工程、控制工程、功能安全或相关专业。
Bachelor’s degree or above in Computer Science, Software Engineering, Automation, Electronic Engineering, Control Engineering, Functional Safety, or related fields.
2. 扎实的操作系统基础，深入理解进程/线程、内存管理、IPC、调度、驱动模型、资源隔离、异常处理与系统启动等核心机制；熟悉微内核架构及其设计理念。
Strong operating system fundamentals, with deep understanding of processes/threads, memory management, IPC, scheduling, driver models, resource isolation, exception handling, and system boot mechanisms; familiarity with microkernel architecture and its design principles is required.
3. 具备操作系统、基础软件、嵌入式系统或复杂软件平台相关研发经验，能够独立完成安全分析、安全方案设计和安全机制实现。
Hands-on experience in operating systems, basic software, embedded systems, or complex software platforms, with the ability to independently conduct safety analysis, safety solution design, and safety mechanism implementation.
4. 熟练掌握 C/C++，并具备 Python 或其他脚本语言开发能力，能够完成自动化分析、测试验证、数据处理或工具链开发工作。
Proficient in C/C++ and capable of using Python or other scripting languages to perform automated analysis, test validation, data processing, and toolchain development.
5. 具备从复杂系统中提取关键特征并构建健康度指标体系的能力，能够基于日志、trace、运行数据、时序行为和代码变更开展问题定位、状态评估与失效趋势分析。
Ability to extract critical features from complex systems and build system-health metric frameworks, and to perform issue localization, state assessment, and failure-trend analysis based on logs, traces, runtime data, temporal behavior, and code changes. 投递