Key Responsibilities

Conduct continuous security monitoring, incident analysis, and response utilizing existing security platforms and tools.

Develop, maintain, and optimize automation scripts to enhance the efficiency of threat detection, investigation, and remediation processes.

Analyze security logs, alerts, and large datasets to identify potential threats, vulnerabilities, and abnormal activities.

Design and implement alerting mechanisms and security audit solutions for timely detection and response to security incidents.

Prepare and maintain technical documentation, including audit reports, security policies, procedures, and operational manuals.

Collaborate with cross-functional teams to strengthen the overall security posture and support risk mitigation initiatives.

Education: Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Technology, or a related field.

Programming Skills: Strong proficiency in Python, Java, Shell scripting, or other programming languages, with hands-on experience in automation development.

Cloud Security Experience: Familiarity with cloud security solutions such as AWS or Alibaba Cloud.

Security Tools Knowledge: Experience with common security tools and platforms, including SIEM, IDS/IPS, and WAF.

Security Principles: Solid understanding of network security, application security, and data protection principles.

Data Analysis Skills: Strong data analysis capabilities, proficient in SQL, with experience in data warehouse or big data technologies such as MaxCompute, Hive, or Flink preferred.

Threat Identification: Ability to identify threats, anomalies, and trends from large-scale datasets.

Compliance Knowledge: Familiarity with security standards and compliance frameworks such as ISO 27001, GDPR, or similar regulations.

Soft Skills: Strong analytical thinking, problem-solving skills, and the ability to thrive in a fast-paced environment.