Roles & Responsibilities

Job Description

• Driving company-wide security risk governance projects and vulnerability remediation efforts. Need to deeply understand high-risk areas such as network architecture, infrastructure operations, internal core systems, and global configurations. You will provide specific and actionable security guidance to asset owners, expediting the process of security risk remediation.
• Continuously improving the internal security detection system by actively analyzing internal incidents and threat intelligence data. You will consistently update and enhance alarm rules to ensure effective security monitoring and threat detection.
• Responding to security incidents and detection alerts by conducting in-depth root cause analysis. This includes proactively identifying and investigating issues, as well as collaborating with other teams to assess their impact on the business and implementing appropriate response measures.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5 years of experience in incident response, system security, network monitoring, vulnerability management, or related fields.
• Familiarity with best practices in security engineering, including network security, security operations, system security, and incident response is mandatory.
• Proficiency in specialized technical areas such as intrusion detection, deception detection, digital forensics, malware analysis, and threat tracking.
• Proficiency in analyzing cybersecurity operational data to extract insights for crafting precise threat detection rules and defense strategies.
• Ability to identify and remediate security vulnerabilities, and knowledge of common techniques used by attackers and security defense measures.
• Familiarity with commonly used security monitoring, log analysis, and forensic tools, and the ability to effectively apply them in the investigation and analysis of security events.
• Proficiency in at least one scripting language, such as Python, Perl, or Bash, with experience in automating security tasks and tool development.
• Ability to explain complex cybersecurity concepts clearly to technical staff, non-technical staff, regulators, and management team.
• Experience working in a large-scale internet enterprise's Security Incident Response Team (SIRT), participating in government or internal company red team/blue team exercises, and practical experience in defensive strategies.
• Fluent English communication skills for effective collaboration with multinational teams.

Tell employers what skills you have

Perl
Information Security
Digital Forensics
Reverse Engineering
Security Operations
Remediation
Vulnerability Management
Defense
Investigation
Cryptography
Root Cause Analysis
Scripting
Python
Threat Intelligence
Intrusion Detection
Network Security