蔚来软件安全开发工程师
社招全职5-7年数字技术地点：上海状态：招聘
任职要求
1. 本科及以上学历，计算机、通信、数学等相关专业。大型企业、互联网公司五年以上工作经验，或三年以上系统安全强相关工作经验； 2. 熟悉Git、GitlabCI、Jenkins等通用研发流程工具，熟悉常见的编译工具与系统，如CMake、Maven、 Gradle、Yacto、Soong等； 3. 了解容器化技术，熟悉Docker，Kubernetes等常用底层框架，有大规模或复杂场景的实践经验； 4. 了解底层系统软件和（或）服务端应用的架构设计、开发、测试流程，熟悉相关的安全/质量保障体系和方法； 5. 具备良好的编程和软件开发技能，熟悉Python/Java/C中一到两种语言，以及相应的开发和构建框架； 6. 具备数据库设计和管理的知识，如MySQL、MongoDB、Redis等；具备对RabbitMQ等消息队列的理解和实践经验。 7. 熟悉SonarQube、Coverity、BlackDuck等工具者优先； 8. 熟悉系统安全原理、了解常见的代码缺陷，有软件成分分析、安全漏洞分析等经验者优先； 9. 在汽车或智能设备行业，有主导设计或参与实施过安全研发流程和体系者优先； 10. 具备良好的英语沟通和写作能力者优先。
工作职责
1. 负责或参与SDL、DevSecOps等安全研发流程的设计/扩展、部署、迭代、和评估； 2. 设计适合智能汽车研发全过程的安全检测流程和机制，集成各类自动化安全扫描与合规检测工具； 3. 技术性指导研发部门执行与实施信息安全有关的法规和标准，并根据需求，设计可工程化的解决方案； 4. 主导或参与制定智能汽车安全研发的相关标准和规范。
包括英文材料
学历+
Git+
https://www.youtube.com/watch?v=rH3zE7VlIMs
Learn Git from start to finished in this full course written by ThePrimeagen.
Jenkins+
https://www.youtube.com/watch?v=f4idgaq2VqA
CMake+
https://cmake.org/getting-started/
We want to give you the resources you need to confidently leverage CMake as your build system of choice.
https://learnxinyminutes.com/zh-cn/cmake/
CMake 是一个跨平台且开源的自动化构建系统工具。通过该工具你可以对你的源代码进行测试、编译或创建安装包。
https://www.youtube.com/watch?v=7YcbaupsY8I
CMake introduction for absolute beginners.
Maven+
https://liaoxuefeng.com/books/java/maven/index.html
Maven是一个Java项目管理和构建工具，它可以定义项目结构、项目依赖，并使用统一的方式进行自动化构建，是Java项目不可缺少的工具。
https://www.youtube.com/watch?v=Xatr8AZLOsE
You'll learn how to use Maven like a professional: installations, using the mvn wrapper, using Maven together with IDEs, and of course the Maven basics.
Gradle+
[英文] Getting Started
https://docs.gradle.org/current/userguide/getting_started_eng.html
Everyone has to start somewhere, and if you’re new to Gradle, this is where to begin.
[英文] Gradle Guides
https://gradle.org/guides/
Here you can find project-based topical guides to help you learn Gradle through using it.
https://www.youtube.com/watch?v=gKPMKRnnbXU
Ever looked for a comprehensive tutorial to Gradle that is fun and entertaining at the same time?
Docker+
https://www.youtube.com/watch?v=GFgJkfScVNU
Master Docker in one course; learn about images and containers on Docker Hub, running multiple containers with Docker Compose, automating workflows with Docker Compose Watch, and much more. 🐳
https://www.youtube.com/watch?v=kTp5xUtcalw
Learn how to use Docker and Kubernetes in this complete hand-on course for beginners.
Kubernetes+
https://kubernetes.io/docs/tutorials/kubernetes-basics/
This tutorial provides a walkthrough of the basics of the Kubernetes cluster orchestration system.
https://kubernetes.io/zh-cn/docs/tutorials/kubernetes-basics/
本教程介绍 Kubernetes 集群编排系统的基础知识。每个模块包含关于 Kubernetes 主要特性和概念的一些背景信息，还包括一个在线教程供你学习。
https://www.youtube.com/watch?v=s_o8dwzRlu4
Hands-On Kubernetes Tutorial | Learn Kubernetes in 1 Hour - Kubernetes Course for Beginners
https://www.youtube.com/watch?v=X48VuDVv0do
Full Kubernetes Tutorial | Kubernetes Course | Hands-on course with a lot of demos
系统设计+
https://roadmap.sh/system-design
Everything you need to know about designing large scale systems.
https://www.youtube.com/watch?v=F2FmTdLtb_4
This complete system design tutorial covers scalability, reliability, data handling, and high-level architecture with clear explanations, real-world examples, and practical strategies.
测试流程+
https://www.youtube.com/watch?v=3kzHmaeozDI
If you haven't come across unit testing and wondering what it's all about then take some time and watch this video.
https://www.youtube.com/watch?v=BQqzfHQkREo
https://www.youtube.com/watch?v=VywxIQ2ZXw4
This course will introduce you to Postman and is suited for beginners.
https://www.youtube.com/watch?v=zp5Jh2FIpF0
Python+
https://liaoxuefeng.com/books/python/introduction/index.html
中文，免费，零起点，完整示例，基于最新的Python 3版本。
https://www.learnpython.org/
a free interactive Python tutorial for people who want to learn Python, fast.
https://www.youtube.com/watch?v=K5KVEU3aaeQ
Master Python from scratch 🚀 No fluff—just clear, practical coding skills to kickstart your journey!
https://www.youtube.com/watch?v=rfscVS0vtbw
This course will give you a full introduction into all of the core concepts in python.
Java+
https://www.youtube.com/watch?v=eIrMbAQSU34
Master Java – a must-have language for software development, Android apps, and more! ☕️ This beginner-friendly course takes you from basics to real coding skills.
C+
https://www.freecodecamp.org/chinese/news/the-c-beginners-handbook/
本手册遵循二八定律。你将在 20% 的时间内学习 80% 的 C 编程语言。
https://www.youtube.com/watch?v=87SH2Cn0s9A
https://www.youtube.com/watch?v=KJgsSFOSQv0
This course will give you a full introduction into all of the core concepts in the C programming language.
https://www.youtube.com/watch?v=PaPN51Mm5qQ
In this complete C programming course, Dr. Charles Severance (aka Dr. Chuck) will help you understand computer architecture and low-level programming with the help of the classic C Programming language book written by Brian Kernighan and Dennis Ritchie.
MySQL+
https://juejin.cn/post/7190306988939542585
这是一篇 MySQL 通关一篇过硬核经验学习路线，包括数据库相关知识，SQL语句的使用，数据库约束，设计等。
[英文] MySQL Tutorial
https://www.mysqltutorial.org/
your go-to resource for mastering MySQL in a fast, easy, and enjoyable way.
https://www.youtube.com/watch?v=5OdVJbNCSso
MySQL SQL tutorial for beginners
https://www.youtube.com/watch?v=7S_tz1z_5bA
This beginner-friendly course teaches you SQL from scratch.
MongoDB+
https://learnxinyminutes.com/mongodb/
MongoDB is a NoSQL document database for high volume data storage.
https://studio3t.com/academy/#courses
The fastest way to learn MongoDB
https://www.youtube.com/watch?v=c2M-rlkkT5o
This video will give you and introduction to MongoDB in 1 Hour. Afterwards I recommend exploring aggregation, replication, and sharding.
https://www.youtube.com/watch?v=ExcRbA7fy_A&list=PL4cUxeGkcC9h77dJ-QJlwGlZlTd4ecZOA
You'll learn how to use MongoDB (a NoSQL database) from scratch. You'll also learn how to integrate it into a simple Node.js API.
Redis+
[英文] Developer Hub
https://redis.io/dev/
Get all the tutorials, learning paths, and more you need to start building—fast.
https://www.runoob.com/redis/redis-tutorial.html
REmote DIctionary Server(Redis) 是一个由 Salvatore Sanfilippo 写的 key-value 存储系统，是跨平台的非关系型数据库。
https://www.youtube.com/watch?v=jgpVdJB2sKQ
In this video I will be covering Redis in depth from how to install it, what commands you can use, all the way to how to use it in a real world project.
RabbitMQ+
[英文] RabbitMQ Tutorials
https://www.rabbitmq.com/tutorials
These tutorials cover the basics of creating messaging applications using RabbitMQ.
https://www.youtube.com/watch?v=bfVddTJNiAw
RabbitMQ is a powerful message broker that can help you create resilient and scalable applications.
消息队列+
https://www.youtube.com/watch?v=xErwDaOc-Gs
SonarQube+
https://www.baeldung.com/sonar-qube
In this article, we’re going to be looking at static source code analysis with SonarQube – which is an open-source platform for ensuring code quality.
https://www.youtube.com/watch?v=7-P81EKq-r8
Working with SonarQube? Then you know DevOps.
相关职位
社招2年以上火车票业务系统安
1.研究，维护公司移动端技术安全 2.落地公司移动端安全方案 3.探索前沿技术，为公司在新技术领域进行技术储备
更新于 2024-08-29
社招3年以上A15288
1. 负责安全子系统（安全启动、TEE、文件系统加密、权限控制等）开发和适配； 2. 负责ARM Trustzone、内核加固、SEL4等相关的安全操作系统技术开发； 3. 负责密钥库系统，安全OS，CA和TA等开发工作； 4. 负责系统/软件层安全开发的流程建设和规范编写、落实和优化
更新于 2025-04-24
社招8年以上智能与信息技术
岗位职责 1.功能安全软件设计开发，主导符合ISO26262 (ASILC/D)等级的车载控制器设计与开发,确保系统满足功能安全等级要求。(L4自动驾驶、电控系统、底盘系统等)功能安全软件设计，从需求分析(TSR|SSR)、软件设计到测试验证,主导功能安全转你件开发全流程,参与包括DFMEA、FTA、HARA等分析过程。主导设计安全机制(如故障检测、冗余设计、故障处理等)并集成到软件架构中，覆盖业务层、监控层及基础软件层交互。牵头解决功能安全系统性技术难题(如自动驾驶、电控系统、底盘温系统等场景)； 2.技术标准与流程建设，建立功能安全软件开发流程,协助制定企业级安全设计规范和技术标准并推动流程落地。 3.跨领域协同与创新，协同硬件、应用、算法、测试等团队完成功能安全关键系统的跨领域集成与验证,主导功能安全软件部署；跟踪SOTIF(ISO21448)预期功能安全等新兴技术趋势，推动技术硕研与专利布局。
社招5年以上A229876
1. 负责安全子系统（安全启动、TEE、文件系统加密、权限控制等）设计、开发和适配； 2. 负责ARM Trustzone、内核加固、SEL4等相关的安全操作系统技术开发； 3. 负责密钥库系统，安全OS，CA和TA等开发工作； 4. 负责IPC安全内核的调研、设计和开发工作； 5. 负责安全相关认证工作； 6. 负责系统/软件层安全开发的流程建设和规范编写、落实和优化
更新于 2025-04-24