Job Responsibilities:

• Act as the primary point of contact for the daily operation and management of Cobo’s corporate IT systems and endpoint environment
• Manage employee accounts, devices, and core productivity tools, covering onboarding, offboarding, role changes, and access management 
• Monitor and respond to endpoint security events, including EDR alerts, phishing attempts, and common security incidents
• Support internal users by resolving office IT and security-related issues efficiently, ensuring a smooth employee experience
• Help establish and continuously improve IT operations and baseline security standards as the company scales
• Collaborate closely with Security, Compliance, and Engineering teams, gaining exposure to security practices

Job Requirements:

• Bachelor's Degree in Computer Science, Information Security, or a related discipline.
• At least 2 - 5 years of experience in Corporate IT, IT Operations, or System Support roles
• Hands-on experience supporting Windows and macOS users in an enterprise environment
• Experience with at least one endpoint security solution (e.g. EDR, antivirus, endpoint protection)
• Awareness of common endpoint and office security risks such as phishing, malware, and account compromise
• Familiarity with identity and access management tools such as Active Directory, Google Workspace, or SSO platforms
• Experience supporting employee lifecycle processes (onboarding, role changes, offboarding, access provisioning)

Key Responsibilities:

• Responsible for the infrastructure construction of the company’s internal security operation platform SOC and subsequent security incident management, incident discovery, analysis, emergency response, etc.
• Responsible for general 0day vulnerability analysis, penetration analysis and intrusion detection, timely discovering security risks and taking effective protective measures.
• Responsible for penetration testing, confrontation drills, and assessment of various security products and defense capabilities in intranet, public network, and cloud environments.
• Responsible for risk asset management, automated response orchestration SOAR, tracking and traceability functions, vulnerability emergency response, etc.
• Responsible for the operation of SRC and follow-up of related vulnerability repairs.

Key Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• More than 1 year of experience in incident response, system security, network monitoring, vulnerability management, or related fields.
• Familiarity with best practices in security engineering, including network security, security operations, system security, and incident response.
• Proficiency in specialized technical areas such as intrusion detection, deception detection, digital forensics, malware analysis, and threat tracking.
• Ability to identify and remediate security vulnerabilities, and knowledge of common techniques used by attackers and security defense measures.
• Familiarity with commonly used security monitoring, log analysis, and forensic tools, and the ability to effectively apply them in the investigation and analysis of security events.
• Proficiency in at least one scripting language, such as Python, Perl, or Bash, with experience in automating security tasks and tool development.
• Good communication and coordination skills, strong sense of ownership.