网络安全运营资深顾问

该职位来源于猎聘 Responsibilities:

• Triage, investigate, and resolve complex security incidents escalated from L1 analysts.
• Conduct root cause analysis for security events and deliver comprehensive analytical reports.
• Participate in writing, optimizing, and maintaining SIEM use cases.
• Develop SOC playbooks based on client environments and practical experience.
• Utilize SIEM tools (e.g., Splunk) for daily log analysis, anomalous behavior monitoring, and proactive threat hunting to identify and mitigate potential security risks.
• Focus on and demonstrate expertise in security operations within the Alibaba Cloud environment.
• Collaborate with clients to adopt and implement security technologies.
• Act as a technical expert, maintaining close communication with designated key client security teams. Requirements:
• At least 5 years of experience in the cybersecurity industry.
• Experience working in a multinational corporation is preferred.
• In-depth knowledge of mainstream cybersecurity products and solutions, including cloud security platforms.
• Strong hands-on experience with incident response and SOC technologies, such as Splunk, MDE.
• Proficiency in both written and spoken English.
• Strong programming and scripting skills (e.g., Python, PowerShell, Bash).
• Relevant cybersecurity certifications such as CISSP, GCIA, GCIH, Security+ or equivalent are required.