Staff Security Engineer

Contractor-Staff Security Engineer

As a Staff Security Engineer, your job is to work with our security policy managers to execute, oversee, and document all aspects of the security projects and operation. Your projects will have stakeholders from research teams and functional teams. This job is a perfect fit for those who are technical, interested in exploring new security technology constantly, and able to communicate with others about cybersecurity in non-technical language.

Responsibilities:

• Plan and design the company's security protection system in both private and public cloud environment, and provide industry-leading and flexible security solutions for the business;
• Working directly with internal teams to determine and implement application/network security requirements, designs and maintains network security infrastructure, and responds to security incidents.
• Works with internal customers to interpret/clarify/implement change requests on security devices (primarily firewalls)
• Helping plan and carrying out client' information security strategy and safeguard our computer networks and systems.
• Implement security measures which monitor and protect sensitive data and systems from infiltration and cyber-attacks.
• Developing different ways to solve the existing threats and security issues. Configuring and implementing intrusion detection systems and firewalls.
• Security product development, testing, and implementation.
• Continuous improvement of the security defense capabilities;
• Responsible for security technology research, penetration testing, and vulnerability scanning.
• Review logs and conduct security analysis of our physical and virtual environments.
• Emergency response to network attacks and security incidents based on dynamic operations and monitoring.
• Investigation of major IT security incidents
• Participate in the design and optimization of secure big data analysis models and the construction and optimization of secure big data analysis platforms;
• Define security project scope with the stakeholders in different departments.
• Demonstrates ownership, is a self-starter, and is motivated to get things done.

Basic Qualifications:

• More than 5 years of network security experience
• Have systematic thinking on security product planning and development, and have engaged in product architecture design, development, testing, and other related work.
• Have a background in network security, familiar with common network attacks and defense methods, and have experience in security operations.
• Familiar with OSINT collection and analysis, with prior experience in data analysis, modeling, and correlation analysis.
• White hat hacking knowledge.
• Hands-on experience with the projects in IT security policy that involves firewall rules and SSL VPN.
• Bi-lingual in English and Mandarin Chinese to communicate with stakeholders.
• Demonstrated the ability to effectively influence, negotiate, and interact with internal and external business partners, contractors and vendors to deliver successful results.
• Excellent documentation skills and experience in security incident reporting.
• Bachelor degree.

Preferred Qualifications:

• Experience to achieve success in large companies that require a clear definition of work processes.
• Experience in managing Cloud-based IT Business Application implementation within the company, e.g. Office 365, SalesForce, ServiceNow, Workday, etc.
• Successful records in automating security operation by scripts, software, or new process.
• Familiar with software engineering tools such as Git, Jenkins, and JFrog Artifactory.