信息安全工程师 Security (& Network) Engineer 薪资面议 确定基础架构及应用的安全需求，管理云平台的防火墙，WAF，云资源的安全设置，并负责日常维护。 Determine the security requirements of infrastructure and applications, manage the cloud platform's firewall, WAF, and cloud resource security settings, and be responsible for daily maintenance. 与集团信息技术团队密切合作，基于国家法律法规要求，集团安全标准，根据业务实际需求，费用成本，技术可行性，复杂度进行综合评估，提供具体有效的可执行建议和解决方案。推进相关安全措施的配置和实施，保障落实等保合规等工作。 Work closely with the group's information technology team to conduct a comprehensive assessment based on national laws and regulations, group security standards, actual business needs, costs, technical feasibility, and complexity, and provide specific and effective executable suggestions and solutions. Promote the configuration and implementation of relevant security measures, and ensure the implementation of equal protection and compliance. 负责监控云安全中心，防火墙，WAF，应用程序，代码扫描等各方面安全信息，定期安全扫描，进行分析，判断，修复相关安全风险，漏洞，阻挡安全攻击，保护平台及应用的安全。 Responsible for monitoring all aspects of security information such as cloud security center, firewall, WAF, application, code scanning, etc., conducting regular security scans, conducting analysis, judgment, repairing related security risks and vulnerabilities, blocking security attacks, and protecting the security of the platform and applications. （如具备网络工程能力）监视和分析网络性能，通过数据输入/输出报告和信息以定位问题。使用综合和传统监控工具进行网络故障排除，以隔离和诊断与数据中心/云网络相关的常见网络问题。 Monitor and analyze network performance and data input/output reports to detect problems. Perform network troubleshooting to isolate and diagnose common network problems related to Data Center/Cloud networks using synthetic and traditional monitoring tools （如具备网络工程能力）升级网络硬件及软件组件 Upgrade network hardware and software components as required EDUCATION AND /OR EXPERIENCE: 信息安全要求： 熟练使用Linux，深入掌握安全（及网络）的基础知识； Proficient in using Linux；Strong understanding of Network & Security fundamentals 熟悉阿里云/腾讯云平台，具备熟练管理，创建，使用和维护云上安全资源和服务的能力和具备相关经验；熟悉并具备云防火墙，WAF和安全中心的管理，使用经验； Familiar with the Alibaba Cloud/Tencent Cloud platform, have the ability and relevant experience to skillfully manage, create, use and maintain cloud security resources and services; familiar with and have experience in the management and use of cloud firewalls, WAF and Security Centers; 熟悉应用常见漏洞风险并有相关处理修复经验； Familiar with common application vulnerability risks and have relevant experience in handling and repairing; 能够通过各类日志，深入具体配置，判断定位安全相关的问题，制定解决方案，修复问题或故障； Able to go deep into specific configurations through various logs, determine and locate security-related issues, formulate solutions, and repair problems or faults; 对常见安全问题包括基础架构层级，网络层级，应用层级具备提供有效的解决方案建议以及实际解决能力和经验； Have the ability and experience to provide effective solution suggestions and practical solutions to common security issues including infrastructure level, network level, and application level; 了解安全政策，协议和标准，对中国网络安全和数据保护法规有深入了解，熟悉等保，网络及数据安全等要求，有相关工作落地实施经验； Understand security policies, protocols and standards, have an in-depth understanding of China's network security and data protection regulations, be familiar with requirements such as Class A guarantee, network and data security, and have experience in implementing relevant work; 熟悉并能够进行安全扫描，渗透测试； Familiar with and able to conduct security scans and penetration tests; 良好的书面英语能力 Good written English 如具备网络工程能力： 了解数据中心和云网络的架构，以及与不同组件和整体的关联 Architectural understanding of Data Center and Cloud networking and correlation with different components and the Landscape 拥有思科网络设备配置和管理经验 Experience in configuration and management of Cisco networking devices 有SIEM工具查询和分析经验（有Splunk经验者优先） Experience in querying and analysis in a SIEM tool (Splunk experience preferred) 拥有管理和维护网络系统的经验：LAN、WAN、SD WAN、互联网电路和无线接入点。 Experience in managing and maintenance of network systems: LAN, WAN, SD WAN, internet circuits and Wireless access points 熟悉与网络和应用技术相关的综合监控和警报配置 Familiarity with synthetic monitoring and alerting configuration associated with network and application technologies 能够使用先进的分析工具独立排除故障并解决问题 Ability to troubleshoot and resolve issues independently using advanced analytical tools
