Key Responsibilities:

• Responsible for the infrastructure construction of the company’s internal security operation platform SOC and subsequent security incident management, incident discovery, analysis, emergency response, etc.
• Responsible for general 0day vulnerability analysis, penetration analysis and intrusion detection, timely discovering security risks and taking effective protective measures.
• Responsible for penetration testing, confrontation drills, and assessment of various security products and defense capabilities in intranet, public network, and cloud environments.
• Responsible for risk asset management, automated response orchestration SOAR, tracking and traceability functions, vulnerability emergency response, etc.
• Responsible for the operation of SRC and follow-up of related vulnerability repairs.

Key Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• More than 1 year of experience in incident response, system security, network monitoring, vulnerability management, or related fields.
• Familiarity with best practices in security engineering, including network security, security operations, system security, and incident response.
• Proficiency in specialized technical areas such as intrusion detection, deception detection, digital forensics, malware analysis, and threat tracking.
• Ability to identify and remediate security vulnerabilities, and knowledge of common techniques used by attackers and security defense measures.
• Familiarity with commonly used security monitoring, log analysis, and forensic tools, and the ability to effectively apply them in the investigation and analysis of security events.
• Proficiency in at least one scripting language, such as Python, Perl, or Bash, with experience in automating security tasks and tool development.
• Good communication and coordination skills, strong sense of ownership.