Duties and Responsibilities
● Lead the security track in different project
● Provide subject matter expertise, and design overall security frameworks reference
from standard
● Continually evaluate new threats in the local and cloud environments, to identify the
impact on IT and Business to develop and implement security controls
...
● Participate, lead and jointly deliver security evaluation reports on security providers
(Azure, Ali Cloud), and Software as a Service solutions
● Designing and implementing the security measures needed to protect data against
unauthorized access, including secure authentication methods, encryption, access control
lists, intrusion detection systems, firewalls, and other measures
● Complete each quarterly planning KPI task, combine the management platform (such
as CyberArk, Splunk, Threat Intelligence etc.) to give goals, and complete it within the
prescribed plan
● Regularly communicate with the business to provide the business with a more secure
architecture and platform security planning
Requirements
● A bachelor's degree in computer science or equivalent experience is required
● At least 5+ years of experience in application & infrastructure (cloud & data center)
security delivery & operation
● Deep understanding of cyber regulations in China
● Experienced in various DevSecOps technologies including Dynamic Application
Security Testing, Static Application Security Testing, Interactive Application Security
Testing, Open-Source Vulnerability Scanning, Container Security, Credential Scanning.
● Experience with one or more major cloud services (AWS, Microsoft Azure, or Alibaba)
● Experience with Security incident response and operation is preferred
● Good verbal and written communication in Mandarin and English