Working location: Hong Kong University of Science and Technology (at least 3-4 days per week)

Internship duration: June 1, 2025

Duties:

1. Secure cloud platform deployment

   1. Participate in the deployment of a container cloud environment based on Kubernetes (using Huawei Cloud CCE architecture)

   2. Implement the Notary v2 mirror signature verification system to ensure compliance with the requirements of Chapter 553 of the Electronic Transactions Act

2. Core security module development

   1. Develop TEE trusted execution environment module (integrate Intel SGX and domestic encryption algorithm dual solution)

   2. Build a sensitive data audit system for the National Security Law, supporting data classification labels and evidence chain functions

3. Compliance implementation

   1. Implement the encryption standard of Chapter 486 of the Personal Data (Privacy) Ordinance (adopting AES-256 and SM4 dual encryption)

   2. Develop a three-level access control module for the Legal Department, realizing a basic, enhanced, and confidential permission management system

4. Test and validation

   1. Execute 1,000 concurrent stress tests (refer to GLD-2023 technical specifications)

   2. Assist in passing the CC EAL5+ security certification and ISO/IEC 27001 audit

Technical stack requirements

• Container technology: Docker security policy configuration, Kubernetes network policy design

• Trusted Computing: Intel SGX Enclave development, ARM TrustZone application experience

• Cryptography: Implementation of national security SM2/SM4/SM9 algorithms, homomorphic encryption technology

Job Requirements

• Hard and fast conditions:

  • Computer Science/Cybersecurity Professional Master's Degree in Progress

  • Familiar with Hong Kong's Cybersecurity Law technical standards, and able to interpret data localization clauses

  • At least master two core technologies: container security, trusted execution environment development or cryptography application

• Priority conditions:

  • Have legal technology project experience (such as electronic evidence preservation, judicial blockchain development)

  • Holding CISSP/CISP or cloud security certification (such as CCSP)

  • Chinese and English bilingual ability (need to process legal Chinese and English parallel texts)