岗位职责:
Job Title: 网络安全工程师 Engineer of Cybersecurity
Department: Data Center (DC), Information Technology Department (ITD), HKUST(GZ)
Job ID:
Job Posting Details
Formally established in June 2022, the Hong Kong University of Science and Technology (Guangzhou)(HKUST(GZ)) is a cooperatively-run university between the Chinese mainland and the Hong Kong Special Administrative Region. HKUST(GZ) has obtained approval from the Ministry of Education (MoE) and become the *** legally-independent educational institution co-established by the Mainland and Hong Kong since the announcement and implementation of the “Outline Development Plan for the Guangdong-Hong Kong-Macao Greater Bay Area” and the “Overall Plan for Deepening Globally Oriented Comprehensive Co-operation amongst Guangdong, Hong Kong and Macao in Nansha of Guangzhou”. With a spirit of pioneering innovation, HKUST(GZ) charts new territories in cross-disciplinary education and explores new frontiers in pedagogies, aiming to serve as a role model of the mainland-Hong Kong integrated educational development and become a world-famous high-level university, endeavoring to nurture future-oriented, high-level and innovative talents.
In response to the increasingly complex challenges faced by the rapidly changing world, HKUST(GZ) adopts a brand-new and cross-disciplinary academic structure featuring “Hub” and “Thrust” to substitute the conventional one characterized by “school” and “department”, facilitating cross-disciplinary integration while vigorously developing emerging and frontier disciplines. This is a groundbreaking move in the higher education community across the globe.
HKUST(GZ) comprises four Hubs, namely Function Hub, Information Hub, Systems Hub, Society Hub and 16 thrusts. The admission of undergraduate students begins in 2023, with the *** batch of programs covering artificial intelligence, data science and big data technology and smart manufacturing engineering.
HKUST(GZ) is located at *** Duxue Road, Qingsheng Hub Cluster, Nansha District, Guangzhou. The campus covers an area of about 1,669 mu (111.3 hectares) and is divided into two construction phases. The *** phase covers an area of about 716 mu (47.7 hectares) with a floorage of about 636,000 square meters (63.6 hectares), which had been officially put into use in September 2022. The design of the campus blends natural scenery with architecture, with key cutting-edge technologies for energy conservation and environmental protection adopted during the design and construction process, in a bid to establish the campus as a new benchmark of green, smart and sustainable development.
Duties
1. 信息安全制度建设：负责制定和完善学校的信息安全制度体系，不断提升网络和数据安全的管理水平和防护能力。
2. 安全策略设计与实施：设计、实施和维护网络安全策略，以防御恶意攻击和数据泄露，保护学校网络和系统安全。
3. 制度落实与监督：检查、监督和指导安全管理制度的执行情况。
4. 策略执行审核：负责安全策略执行情况的审核，确保合规性。
5. 日志管理与分析：收集和分析信息系统日志及审计记录，对关键设备进行日志检查和审核，并及时报告潜在问题。
6. 操作行为监控：监督管理员的操作行为，检查安全职责落实情况。
7. 安全控制设计与实施：设计和实施安全控制措施，包括防火墙、入侵检测系统和防病毒软件等，确保网络安全。
8. 风险评估与漏洞扫描：进行网络安全风险评估和漏洞扫描，及时发现并解决潜在安全问题。
9. 业务系统安全测试：负责学校业务系统的安全测试与加固，指导开发人员修复安全漏洞。
10 .渗透测试与漏洞挖掘：负责线上环境的渗透测试和Web漏洞挖掘，保障系统安全。
11. 安全事件应急处理：跟踪和分析安全事件，包括APT攻击、木马和病毒等，并进行紧急处理。
12. 跨部门协作：与其他部门合作，确保网络安全政策和流程的落实和持续改进。
13. 技术前沿跟踪：关注国内外安全技术前沿，积极开展技术交流和分享。
14. 用户支持：解决师生关于网络安全的问题和咨询。
任职要求:
Qualification Requirements
1. 学历背景：硕士及以上学历，计算机相关专业，信息安全或网络安全专业优先。
2. 工作经验：10年以上信息安全工程师或相关岗位经验，具备丰富的网络安全实战经验；有5年世界五百强或同等企业单位相关信息安全岗位工作经验者优先。
3. 威胁情报分析能力：具有深入的安全威胁情报分析能力，能识别并应对高级持续性威胁（APT）。
4. 网络安全知识：熟悉网络体系结构、TCP/IP协议，掌握常见网络攻击方法、原理及防范措施，具备扎实的信息安全理论基础。
5. 安全产品知识：熟悉安全态势感知平台、防火墙、日志审计、WAF、IPS、主机安全、抗DDoS等主流安全产品的工作原理和配置。
6. 日志分析经验：具备IPS/IDS、防火墙、操作系统和应用程序日志的分析经验，能够从日志中发现异常。
7. 渗透测试技能：熟练使用SQLmap、BurpSuite、AWVS、Kali等常见渗透测试工具，能进行手动或结合工具的安全测试。
8. 编程能力：熟练掌握Java、Python或Shell等一种或多种主流编程语言，能够开发简单的安全工具。
9. 文档撰写：具备文档编写能力，能够独立完成系统评估报告和安全漏洞验证报告。
10. 漏洞挖掘经验：具有真实漏洞挖掘和利用经验，在安全平台提交过漏洞或发表原创技术文章者优先。
11. 法规与标准：熟悉ISO 27001、《网络安全法》《数据安全法》《个人信息保护法》及等级保护相关标准和规范。
12. 认证及实战经验：持有CISSP、CISP、CISA或CISM认证者优先，有CTF或攻防演练比赛经验者优先。
13. 语言能力：良好的中英文书写和口语能力。
This is a Mainland appointment, and the appointee will be offered a contract by HKUST(GZ) entity in accordance with the Mainland labor laws and regulations. Starting salary will be commensurate with qualifications and experience.
HKUST (GZ) is an equal opportunities employer and is committed to our core values of inclusiveness, diversity, and respect.