- Jobs
ResumeCreate your job-winning resume using our free resume builder.
PortfolioShowcase your skills and projects with a professional portfolio.ResumeCreate your job-winning resume using our free resume builder.Resume BuilderMake a resume for free.Resume TemplatesAccess our extensive library of professional & ready-to-use templates.Resume ExamplesGet inspired by real resume examples to create your own.Occupation GuideAccess resume writing guides tailored for different professions.Resume HelpGet expert advice on all things resume from our team of recruitment specialists.- ResourcesSuccess StoriesBusiness ExcellenceAbout CakeResumeFeatured Reads
- Hire
- Download our App
CakeResume Talent Search
The Most Lightweight and Effective Recruiting Plan
Search resumes and take the initiative to contact job applicants for higher recruiting efficiency. The Choice of Hundreds of Companies.
- Browse all search results
- Unlimited access to start new conversations
- Resumes accessible for only paid companies
- View users’ email address & phone numbers
Definition of Reputation Credits
Stephen Hsu
I have in-depth knowledge of ISO27001, IEC62443, ETSI EN 303645, NIST 800-160, CSF 2.0, and GDPR standards. I have extensive experience in architecture design, detailed design, development, defense in depth, and implementation of information security solutions, especially in internal audits within organizations, system implementation, and planning, implementation, and problem-solving throughout the product project lifecycle. Furthermore, I have significant work experience with Windows and Linux platforms, applying them to manual and automated testing solutions for product functionality and security.
Taoyuan City, Taiwan
Certifications and related courses
Information Security Certification
- ISC2 CC (certified in cybersecurity)
- ISC2 CISSP
(Certified in Information Security Professional) - EC-Council CEH
IT System-related and other certifications
- RedHat RHCSA
- RedHat RHCE
- Digital Electronic Circuit Inspection Class B Certification.
Security Certifications and Training Courses
- ISO 27001:2022 Lead Auditor
- TUV ISA/ IEC 62443 training
- TWCSA - RAT Advanced Red Team Training.
Education
2014 - 2015
Concordia University
Master of Business Administration (M.B.A.)
2002 - 2004
Minghsin University of Science and Technology (Two-Year College)
Electronic Engineering
Work Experience
Senior Test programmer • Robert Bosch
* Based on ISO27001, NIST 800-160, ISO 31000, IEC 62443, GDPR, Mitre Att&ck, ETSI EN 303 645, and CSF 2.0 standards, I develop and implement secure solutions for product projects and supply chains. This includes various security solutions throughout the product development lifecycle and up to decommissioning, as well as project architecture reviews.
* According to headquarters' security quality requirements (based on IEC 62443, ISO 27001, CSF 2.0 standards), data security management/internal audits, localization system implementation, preparation of related materials, and conducting education and training will be carried out.
* Based on verification and validation (V&V), I conduct functional and security testing on IP security cameras and their backend support systems and platforms (PCs, AIOs, servers, network environments, Windows/[embedded] Linux). This includes penetration testing, ACL permission control, defense in depth validation, SSO, and ZTNA.
* According to customer requirements, conduct system planning analysis and (semi/full) automated platform design and development, utilizing shell scripting, Python, and C#.
* Utilize the Agile-Waterfall Hybrid model to develop, track, and manage the progress of work items.
Feb 2022 - Dec 2023
Senior Testing Engineer • Allion LABs
* Assist business personnel in understanding project requirements from clients and evaluate how to implement the best solutions, leading to the creation of RFI/RFP documents.
* Responsible for testing system planning and architecture analysis, x86 or ARM architecture/IoT testing-related proposal writing, presentation, and POC development.
* Conduct functional and security testing on information products and IoT products based on Verification and Validation (V&V), ETSI EN 303 645, NICE framework, NIST 800-160, and NIST 800-204.
- The architecture and platform encompass PC/AIO/server/car audio/Android/IoT devices/Windows/(embedded) Linux/Android.
- The protocol and applications include wired and wireless networks, Bluetooth (including BLE), Bluetooth connectivity technology applied in the automotive field, and USB/ HDMI/ DP peripherals.
* Based on internal and external customer requirements, I conduct system planning analysis and design and develop (semi/fully) automated platforms using shell scripting, Python, and C#.
* Using Scrum and Kanban methodologies combined with the Asana SaaS app to monitor and manage tasks in real time.
Oct, 2006 - Dec 2021
Stephen Hsu
I have in-depth knowledge of ISO27001, IEC62443, ETSI EN 303645, NIST 800-160, CSF 2.0, and GDPR standards. I have extensive experience in architecture design, detailed design, development, defense in depth, and implementation of information security solutions, especially in internal audits within organizations, system implementation, and planning, implementation, and problem-solving throughout the product project lifecycle. Furthermore, I have significant work experience with Windows and Linux platforms, applying them to manual and automated testing solutions for product functionality and security.
Taoyuan City, Taiwan
Certifications and related courses
Information Security Certification
- ISC2 CC (certified in cybersecurity)
- ISC2 CISSP
(Certified in Information Security Professional) - EC-Council CEH
IT System-related and other certifications
- RedHat RHCSA
- RedHat RHCE
- Digital Electronic Circuit Inspection Class B Certification.
Security Certifications and Training Courses
- ISO 27001:2022 Lead Auditor
- TUV ISA/ IEC 62443 training
- TWCSA - RAT Advanced Red Team Training.
Education
2014 - 2015
Concordia University
Master of Business Administration (M.B.A.)
2002 - 2004
Minghsin University of Science and Technology (Two-Year College)
Electronic Engineering
Work Experience
Senior Test programmer • Robert Bosch
* Based on ISO27001, NIST 800-160, ISO 31000, IEC 62443, GDPR, Mitre Att&ck, ETSI EN 303 645, and CSF 2.0 standards, I develop and implement secure solutions for product projects and supply chains. This includes various security solutions throughout the product development lifecycle and up to decommissioning, as well as project architecture reviews.
* According to headquarters' security quality requirements (based on IEC 62443, ISO 27001, CSF 2.0 standards), data security management/internal audits, localization system implementation, preparation of related materials, and conducting education and training will be carried out.
* Based on verification and validation (V&V), I conduct functional and security testing on IP security cameras and their backend support systems and platforms (PCs, AIOs, servers, network environments, Windows/[embedded] Linux). This includes penetration testing, ACL permission control, defense in depth validation, SSO, and ZTNA.
* According to customer requirements, conduct system planning analysis and (semi/full) automated platform design and development, utilizing shell scripting, Python, and C#.
* Utilize the Agile-Waterfall Hybrid model to develop, track, and manage the progress of work items.
Feb 2022 - Dec 2023
Senior Testing Engineer • Allion LABs
* Assist business personnel in understanding project requirements from clients and evaluate how to implement the best solutions, leading to the creation of RFI/RFP documents.
* Responsible for testing system planning and architecture analysis, x86 or ARM architecture/IoT testing-related proposal writing, presentation, and POC development.
* Conduct functional and security testing on information products and IoT products based on Verification and Validation (V&V), ETSI EN 303 645, NICE framework, NIST 800-160, and NIST 800-204.
- The architecture and platform encompass PC/AIO/server/car audio/Android/IoT devices/Windows/(embedded) Linux/Android.
- The protocol and applications include wired and wireless networks, Bluetooth (including BLE), Bluetooth connectivity technology applied in the automotive field, and USB/ HDMI/ DP peripherals.
* Based on internal and external customer requirements, I conduct system planning analysis and design and develop (semi/fully) automated platforms using shell scripting, Python, and C#.
* Using Scrum and Kanban methodologies combined with the Asana SaaS app to monitor and manage tasks in real time.
Oct, 2006 - Dec 2021