蚂蚁金服蚂蚁集团-IOT安全专家-支付技术
社招全职4年以上技术类-安全地点：杭州状态：招聘
任职要求
有以下任一经验者优先： 1、熟悉常见智能硬件设备&手机的固件提取与分析方法，有路由器固件分析经验，熟悉常用root方法 2、熟悉硬件PCB设计、电路debug分析调试 3、熟悉常见无线电射频通信开发调试，诸如NFC、Sub-1G、NB-IOT、Lora等 4、熟悉GNU Radio、Matlab，能熟练使用USRP、BladeRF等SDR设备 5、熟悉NFC、BLE、ZigBee、6LoWPAN等无线通讯协议，并可对其进行安全分析和调试 6、具备良好的STM32\ZYNQ\FPGA任一开发经验 7、有良好的开源硬件学习和使用经验，如Arduino、Raspberry Pi等 8、有RTOS、Android、Linux系统安全经验 9、有逆向工程经验，熟练使用IDA、OllyDbg等逆向工具进行静态&动态二进制分析 10、有智能硬件破解的相关实战经验，在GeekPwn、XPwn、HackPwn等破解大赛展示破解项目 11、熟悉人脸、指纹、U盾、加密芯片等身份识别算法或具备相关开发调试经验优先
工作职责
保障支付宝众多IoT业务场景的安全，从硬件、系统、传感器、网络、移动端、云端等各个方面发掘IoT应用场景可能的安全问题，并能予以解决。
包括英文材料
PCB+
[英文] PCB Basics
https://learn.sparkfun.com/tutorials/pcb-basics/all
One of the key concepts in electronics is the printed circuit board or PCB.
https://resources.pcb.cadence.com/jbj-pcb-design-from-start-to-finish
This series, by John Burkhert, is a step-by-step guide on printed circuit board design with information suitable for beginners to graduate-level users.
https://www.instructables.com/Intro-to-Circuit-Design-Learn-How-to-Make-Your-Fir/
The goal of these materials is to help kick-start your own after school electronics club or add some extra fun to an existing class or engineering team that wants to learn more about electronics.
https://www.youtube.com/watch?v=aODkA2mrimQ
Recommendations on how to approach learning PCB and hardware design, including my journey, thoughts on university courses, IPC CID, ECAD tools, and resource tips.
IOT+
https://microsoft.github.io/IoT-For-Beginners/#/
Azure Cloud Advocates at Microsoft are pleased to offer a 12-week, 24-lesson curriculum all about IoT basics.
https://www.ibm.com/think/topics/internet-of-things
The Internet of Things (IoT) refers to a network of physical devices, vehicles, appliances, and other physical objects that are embedded with sensors, software, and network connectivity, allowing them to collect and share data.
https://www.youtube.com/watch?v=1KVrBjSqS5s
The term 'Internet of Things' was coined by Kevin Ashton in 1999 to refer to connecting the Internet to the physical world via sensors.
MATLAB+
https://matlabacademy.mathworks.com/?page=1&sort=featured
Learn MATLAB and Simulink through interactive, in-product exercises
https://www.mathworks.com/help/matlab/getting-started-with-matlab.html
Millions of engineers and scientists worldwide use MATLAB® to analyze and design the systems and products transforming our world.
https://www.youtube.com/watch?v=7f50sQYjNRA
Learn the fundametnals of MATLAB in this tutorial for engineers, scientists, and students.
FPGA+
https://nandland.com/fpga-101/
These are the fundamental concepts that are important to understand when designing FPGAs.
Arduino+
https://docs.arduino.cc/learn/
Basic knowledge about principles and techniques behind the Arduino ecosystem.
https://www.youtube.com/watch?v=yi29dbPnu28
Learn the basics of programming your arduino microcontroller with Mark Rober!
Raspberry Pi+
https://www.raspberrypi.com/tutorials/
Whether you're doing some smart home improvements or just want to inject a bit of fun into your life, we've got something that you can build easily and affordably.
https://www.youtube.com/playlist?list=PLGs0VKk2DiYxdMjCJmcP6jt4Yw6OHK85O
In this series of lessons we will teach you how to use the Raspberry Pi.
https://www.youtube.com/watch?v=tIEI3sv_gxM
Learn Raspberry Pi with this Raspberry Pi tutorial for complete beginners. No need to know anything to get started!
RTOS+
[英文] RTOS Fundamentals
https://www.freertos.org/Documentation/01-FreeRTOS-quick-start/01-Beginners-guide/01-RTOS-fundamentals
A Real-Time Operating System (RTOS) is a type of computer operating system designed to be small and deterministic.
Android+
https://roadmap.sh/android
Step by step guide to becoming an Android developer .
https://www.youtube.com/playlist?list=PLQkwcJG4YTCSVDhww92llY3CAnc_vUhsm
Linux+
https://ryanstutorials.net/linuxtutorial/
Ok, so you want to learn how to use the Bash command line interface (terminal) on Unix/Linux.
https://ubuntu.com/tutorials/command-line-for-beginners
The Linux command line is a text interface to your computer.
https://www.youtube.com/watch?v=6WatcfENsOU
In this Linux crash course, you will learn the fundamental skills and tools you need to become a proficient Linux system administrator.
https://www.youtube.com/watch?v=v392lEyM29A
Never fear the command line again, make it fear you.
https://www.youtube.com/watch?v=ZtqBQ68cfJc
算法+
https://roadmap.sh/datastructures-and-algorithms
Step by step guide to learn Data Structures and Algorithms in 2025
https://www.hellointerview.com/learn/code
A visual guide to the most important patterns and approaches for the coding interview.
https://www.w3schools.com/dsa/
相关职位
社招技术类-安全
1、负责支付宝医疗业务客户端产品的安全保障工作，覆盖医疗业务独立端（如安诊儿）、医疗IOT客户端等 2、负责相关业务客户端产品的需求安全评审、安全代码审计、安全测试、漏洞应急响应等工作； 3、进行与业务贴近的安全技术研究、安全方案设计、安全产品能力运营等。
更新于 2025-07-14
社招5年以上技术类-开发
1.主导建设IoT端变更的定向观测、熔断和故障定位，更快更准的发现、定位和熔断因端变更引发线上问题。 2.独立完成较复杂的系统分析、设计，并主导完成详细设计和编码的任务，并协同各合作团队完成需求/项目的最终落地，确保项目的进度和质量。 3.发现系统各种潜在问题和风险(性能、稳定性、安全、可靠性等方面)，并提出解决方案。
更新于 2025-05-26
社招技术类-质量保证
1. 负责碰一下相关业务质量，制定策略并承接设备端、客户端、服务端等软硬一体全链路保障和问题分析工作。 2. 技术驱动质量提效，并从功能、资金安全以及高可用出发，独立保障各类线下营销活动以及设备作业等。 3. 根据碰一下业务特点，从质量视角挖掘业务增量，助力业务达成目标。
更新于 2025-05-26
社招3年以上核心本地商业-基
1.建立外部情报通道，感知风险动向，获取关键情报线索； 2.完成公司安排的各类信息目标情报调查、专题调查任务； 3.扩展情报信源渠道，打破信息壁垒，为公司提供全面的情报支持和拓展战略；
更新于 2025-03-24