IT Security Operation and Maintenance Engineer

Responsibilities

1. Responsible Daily operation and maintenance of IT security tools and systems (including next-generation firewalls, EDR, HIDS, email security gateways, SWG, DLP, SIEM and other mainstream security tools) 2. Monitor the performance and health of IT security systems, proactively identify and Solve potential problems or anomalies 3. Keep the system updated, complete major version upgrades when necessary, and install security patches in a timely manner to ensure stable and safe operation of the system 4. As a second-line technical support, assist front-line engineers in answering user questions related to security systems, and Troubleshooting and solving network and terminal problems 5. Define and implement relevant rules/configurations of IT security systems according to corporate security requirements and industry best practices to ensure that they provide security protection capabilities as expected 6. Participate in security construction projects and support new security Technical selection and functional verification of the system, and carry out PoC testing, promotion implementation and user training as an SME technical expert 7. Develop and maintain security system-related documents, including standard operation and maintenance procedures (SOPs), user and Oncall FAQ, System administrator and user manual, etc. 8. Have basic audit compliance knowledge and be able to support internal or external audit needs from the security tool level.

Qualifications

1. At least 3 years of work experience in the field of information security 2. Bachelor degree or above in computer or related majors (no major limit for those with outstanding abilities) ) 3. Have a strong interest in information security work, have a solid and steady mentality, be serious and responsible, have good communication and teamwork skills, and have good professional ethics 4. Be familiar with major security tools and systems, including but not limited to next-generation firewalls and EDR , HIDS, email security gateway, SWG, DLP and SIEM, etc., be proficient in the installation, configuration and operation and maintenance of at least three categories of tools/systems 5. Familiar with mainstream operating systems, including Windows Server, Windows 10/11, macOS and Linux The installation, configuration, use and operation and maintenance of Collaborate with suppliers and internal and external partners to achieve set goals 8. Be familiar with at least one programming language, such as Python, Go, etc., and have the ability to automate repetitive work. Bonus points: 1. Have good English communication skills 2. Hold information security certifications, such as CISSP, CISA, and CIW.