Responsibilities

• Design the company-wide data security scheme under the new financial system, and be responsible for the implementation.
• Develop and enhance data security detection capabilities, including but not limited to DLP, data encryption and data masking.
• Continuously validate existing data security rules and models; follow up on data security incident identification, response, handling, investigation, and forensics.
• Continuously improve risk identification capabilities in data security by optimizing detection rules and models to optimize the overall detection coverage; build data asset maps; use graph detection and other techniques to trace data flows and identify sensitive data exfiltration risks.
• Explore and apply AI / LLM techniques to enhance security detection and response, and build AI-driven detection, triage, and automated response solutions.

Job Requirements

• Major in information security, network security, or computer science; 8–10 years of relevant experience in data security.
• Hands-on experience with endpoint and email data loss prevention (DLP).
• Familiar with the data security lifecycle, understanding the risk points and key objectives at each stage.
• Familiar with common security offense and defense techniques, with experience in building security operations and managing data security risks; strong sensitivity to data exposure risks.
• Familiar with data security products and detection methods such as DLP, UEBA, sensitive data identification, data encryption/decryption, and secure data sharing.
• Experience with enterprise-level endpoint data protection solutions; experience in endpoint security, familiarity with macOS and Linux systems, and hands-on experience in data threat modeling is a plus.
• Experience with enterprise-level big data analysis tools such as Flink, Hive, Spark, ElasticSearch, and graph technologies; hands-on experience in security data mining, analytics, or threat intelligence analysis is a plus.
• Strong logical thinking and communication skills, with a good understanding of compliance and legal considerations.

Preferred Qualifications

• Data security expert, directly responsible for DLP capacity building and implementation in financial institutions.
• Experience designing endpoint data protection agent solutions.
• Experience detecting or analyzing internal and external data leakage.
• Experience in data lineage analysis, graph-based security analytics, or sensitive data flow tracing.
• Hands-on experience with security data models, detection rule engines, or in-house security product development.
• Prior experience building or operating data security systems within an enterprise security team.
• Hands-on experience applying AI to security detection, alert triage, or automated response.