Responsibilities

1. Optimize and upgrade the company's intrusion prevention and defense systems
2. Analyze, investigate, and handle security incidents, and drive security capability improvements
3. Operate and manage security products/platforms such as WAF and security centers, enhancing operational efficiency through automation
4. Organize and implement red-teaming/blue-teaming and offensive-defense exercises to identify weaknesses and improve defense capabilities
5. Collaborate with other team members to build foundational and data security systems

Requirements

1. Bachelor's degree or above in Computer Science, Information Security, or a related field, with 3+ years of experience in security operations within internet or financial companies
2. Solid knowledge in security fundamentals, including network, host, application, virtualization, and container security
3. Deep understanding of defense-in-depth, zero trust architecture, and security operations, familiar with mainstream security solutions and products
4. Proficient in common ATT&CK offensive and defensive techniques, capable of intrusion forensics in Linux/Windows/macOS environments; expertise in domain penetration and experience in APT attack/defense or national/provincial-level exercises is a strong plus
5. Familiar with common vulnerability principles; able to define monitoring rules and response strategies as needed; experience in 0day discovery or social engineering is a strong advantage
6. Hands-on experience in WAF, HIDS, IPS, vulnerability scanning, Anti-DDoS, ELK, etc., with skills in operations and policy tuning preferred
7. Strong communication skills, team spirit, and a responsible, detail-oriented, and proactive mindset