Senior Firmware & CVE Lifecycle Engineer

RiDiK (a Subsidiary of CLPS. Nasdaq: CLPS); Jakarta Pusat; On-site; IDR 180,000,000 - 240,000,000; Full time

Job summary

RiDiK, a subsidiary of CLPS, seeks a Firmware / CVE Engineer to manage firmware, BIOS, BMC, NIC, and switch versions across enterprise infrastructure. You will assess CVEs, coordinate upgrades, and ensure patching and remediation are aligned with security policies.

The role requires 5+ years in Infrastructure Lifecycle or Vulnerability Management and strong English communication. Join a team focused on secure, reliable infrastructure updates across multiple platforms.

Qualifications

• 5+ years of experience in Infrastructure Lifecycle Management or Vulnerability Management.
• Strong knowledge of Firmware, BIOS, BMC, NIC, Drivers, and Switches.
• Hands-on experience with CVE assessment and vulnerability remediation.
• Knowledge of vendor advisories, compatibility matrices, and patch testing.
• Experience in change management, rollback planning, and compliance reporting.
• Good English communication skills.

Responsibilities

• Manage and maintain compatible firmware, BIOS, BMC, NIC, driver, and switch versions.
• Assess CVEs, vendor security advisories, and vulnerability risks.
• Plan and coordinate firmware upgrades, security patches, and remediation activities.
• Perform compatibility checks and interoperability assessments.
• Conduct patch testing to ensure infrastructure and cluster stability.
• Develop change plans, rollback strategies, and implementation procedures.
• Maintain vulnerability tracking, compliance documentation, and remediation reports.

Skills

Lifecycle management

Vulnerability management

Firmware expertise

CVE assessment

Patch testing

Change management

Compliance reporting

English communication

Job description

RiDiK, a subsidiary of CLPS, seeks a Firmware / CVE Engineer to manage firmware, BIOS, BMC, NIC, and switch versions across enterprise infrastructure. You will assess CVEs, coordinate upgrades, and ensure patching and remediation are aligned with security policies.

The role requires 5+ years in Infrastructure Lifecycle or Vulnerability Management and strong English communication. Join a team focused on secure, reliable infrastructure updates across multiple platforms.