Cyber Security Analyst

该职位来源于猎聘 Position Summary: The Senior Cyber Security Analyst will play a critical role in advancing Rich’s cybersecurity posture, supporting Security Operations (SOC), incident response, and enterprise risk management. This role is responsible for threat detection, analysis, response, and continuous improvement of security controls aligned with ISO 27001, NIST CSF, and internal Cyber Security policies. Key Responsibilities:

• Monitor, triage, and respond to security alerts from SOC, SIEM, and EDR platforms (e.g., CrowdStrike, GreyMatter).
• Conduct incident investigations, root cause analysis, containment, eradication, and recovery.
• Ensure adherence to SLA, case tracking, and documentation standards within ServiceNow.
• Perform threat hunting, vulnerability analysis, and proactive risk identification.
• Support governance, risk, and compliance (GRC) activities (risk assessments, audits, policy alignment).
• Collaborate with global teams (SOC, IT, Legal) for incident response and regulatory alignment.
• Support data protection initiatives including DLP, encryption, and classification controls.
• Participate in improvement of playbooks, detection rules, and automation.
• Contribute to APAC, especially China-specific cybersecurity and regulatory compliance (e.g., PIPL, data localization). Required Qualifications:
• 5+ years in cybersecurity operations / incident response.
• Hands-on experience with SIEM, EDR, XDR, and threat intelligence tools.
• Strong knowledge of security frameworks (ISO 27001, NIST CSF).
• Experience in vulnerability management, IAM/PAM, and cloud security.
• Good understanding of network, endpoint, and cloud architectures.
• Strong analytical and problem-solving skills. Preferred Qualifications:
• Certifications: CISSP or CISP is preferred.
• Experience in multinational/global environments.
• Familiarity with data privacy regulations (PIPL, GDPR, etc.). Key Competencies:
• Fluent English Speaking/Writing
• Accountability and ownership
• Clear communication and stakeholder engagement
• Continuous improvement mindset
• Ability to work under pressure and manage incidents effectively 职位概述：

高级网络安全分析师将在提升 Rich 的网络安全态势方面发挥关键作用，为安全运营中心 (SOC)、事件响应和企业风险管理提供支持。该职位负责威胁检测、分析、响应以及持续改进符合 ISO 27001、NIST CSF 和内部网络安全政策的安全控制措施。

主要职责：

• 监控、分类并响应来自 SOC、SIEM 和 EDR 平台（例如 CrowdStrike、GreyMatter）的安全警报。
• 进行事件调查、根本原因分析、遏制、清除和恢复。
• 确保遵守 ServiceNow 中的 SLA、案例跟踪和文档标准。
• 执行威胁狩猎、漏洞分析和主动风险识别。
• 支持治理、风险和合规 (GRC) 活动（风险评估、审计、政策协调）。
• 与全球团队（SOC、IT、法务）协作，进行事件响应和合规性协调。
• 支持数据保护计划，包括 DLP、加密和分类控制。
• 参与改进剧本、检测规则和自动化流程。
• 为亚太地区，特别是中国地区的网络安全和合规性工作（例如 PIPL、数据本地化）做出贡献。

任职资格：

• 5 年以上网络安全运营/事件响应经验。
• 具备 SIEM、EDR、XDR 和威胁情报工具的实际操作经验。
• 精通安全框架（ISO 27001、NIST CSF）。
• 拥有漏洞管理、IAM/PAM 和云安全方面的经验。
• 深入理解网络、终端和云架构。
• 具备强大的分析和解决问题的能力。

优先资质：

• 认证：持有 CISSP 或 CISP 认证者优先。
• 拥有跨国/全球环境工作经验。
• 熟悉数据隐私法规（PIPL、GDPR 等）。

关键能力：

• 流利的英语口语和写作能力
• 责任心强，勇于担当
• 沟通能力强，善于与利益相关者互动
• 持续改进的思维模式
• 能够在压力下工作并有效管理事件