Cybersecurity Engineer

1. Cybersecurity Product Skills
SIEM (Security Information and Event Management)
• Be familiar with the architecture, deployment, log source integration, and parser development of the SIEM platform.
• Have experience in developing and optimizing secure use cases (Use Cases), and understand the writing of detection rules (e.g., SPL, KQL)).
• Understand the SOC operational process, including log ingestion, alert triage, and incident handling.
NDR (Network Detection and Response)
• Familiar with the deployment architecture and operation and maintenance management of NDR products.
• Understand network traffic analysis and threat detection, including abnormal trafficidentification, lateral movement tracking, data exfiltration detection, etc.
• Familiar with network protocols such as TCP/IP, DNS, HTTP/S, etc.
EDR (Endpoint Detection and Response)
• Familiar with the implementation, configuration, and policy optimization of mainstream EDR platforms.
• Understand endpoint security, threat detection, and incident response processes.
• Familiar with the MITRE ATT&CK framework and threat hunting methods.
Firewall
• Familiar with the architecture planning, policy design, and configuration management of mainstream firewalls (e.g., Huawei, Palo Alto, Fortinet, Check Point, etc.).
• Familiar with firewall deployment, policy optimization, and troubleshooting.
SandBox
• Understand the deployment and operation and maintenance of sandbox products.
• Familiar with the malicious file analysis process and the sandbox detection mechanism.
2. Network and System Fundamentals
• Proficient in the TCP/IP protocol stack, and skilled in routing and switching technologies (OSPF/BGP/VLAN/VPN, etc.)
• Familiar with the configuration and debugging of network devices from major vendors (Huawei, H3C, Cisco, Ruijie, etc.)
• Familiar with Linux operating system management, and capable of writing Shell/Python scripts.
• Possesses the ability to troubleshoot network issues, and is proficient in using packet capture and analysis tools (Wireshark/tcpdump).
3. Comprehensive qualities
• Bachelor's degree or higher, with a major in computer science, networking, communications, cybersecurity, or related fields.
• More than one year of experience in implementing and delivering network or security products.
• Possesses excellent customer communication skills, a strong team spirit, and the ability to write and compile documents.
• Strong sense of responsibility, able to adapt to project pressure, and possesses good self-motivation and continuous learning ability.
• Able to adapt to short-term business trips, and independently handle on-site emergencies.
Priority Conditions (Bonus Points)
Candidates with the following experience will be given priority:
1. Experience in cybersecurity operations
• Has experience operating a Security Operations Center (SOC) and is familiar with the 7x24-hour security monitoring and alarm analysis process.
• Has experience in managed security services (MSS).
• Has experience in defensive drills and defensive operations.
2. Experience in offensive and defensive penetration testing.
• Familiar with security processes such as penetration testing, vulnerability scanning, and intrusion detection.
• Possesses basic knowledge of internal network penetration.
• Independently handled emergency incidents related to network security intrusions.
• Participated in mainstream cybersecurity competitions and achieved rankings.
3. Experience in security auditing
• Understand the standards for building a cybersecurity system.
• Have relevant experience in security auditing and risk assessment.
• Understand compliance frameworks such as NIST and ISO 27001.
4. Other Bonus Points
• Holding security or network certifications such as HCIA-Security, CISSP, CISA, CISM, CEH, CCNP/CCIE, CISP, etc.
• Developed cybersecurity tools or published highly cited open-source projects.
*** Working time and benefits:
• Monday to Friday ([protected info]).
• Short term and Long-term awards
• Huawei University online and offline aboard training.
• Competitive Salary and Service performance bonus. Full salary in 2 months of probation.
• Participating in full insurance benefits (health insurance, social insurance, unemployment insurance), the company supports 24/24 accident insurance and health care insurance for employees.
• Professional working environment, multinational company, good career development opportunities. Cultural and sports activities, taking care of employees' health and life are organized periodically.