Job Description

Locations

• China Mainland_INTERNAL

Skills Required

• data securityintermediate
• endpointintermediate
• building security operationsintermediate
• enterprise-level endpoint data protection solutionsintermediate
• endpoint securityintermediate
• data threat modeling is a plusintermediate
• macOSintermediate
• enterprise-level big data analysis tools such as Flinkintermediate
• security data miningintermediate
• data lineage analysisintermediate
• security data modelsintermediate

Required Qualifications

• Major in information security, network security, or computer science; 8–10 years of relevant experience in data security. (experience, 10 years)
• Hands-on experience with endpoint and email data loss prevention (DLP). (experience)
• Familiar with the data security lifecycle, understanding the risk points and key objectives at each stage. (experience)
• Familiar with common security offense and defense techniques, with experience in building security operations and managing data security risks; strong sensitivity to data exposure risks. (experience)
• Familiar with data security products and detection methods such as DLP, UEBA, sensitive data identification, data encryption/decryption, and secure data sharing. (experience)
• Experience with enterprise-level endpoint data protection solutions; experience in endpoint security, familiarity with macOS and Linux systems, and hands-on experience in data threat modeling is a plus. (experience)
• Experience with enterprise-level big data analysis tools such as Flink, Hive, Spark, ElasticSearch, and graph technologies; hands-on experience in security data mining, analytics, or threat intelligence analysis is a plus. (experience)
• Strong logical thinking and communication skills, with a good understanding of compliance and legal considerations. (experience)

Preferred Qualifications

• Data security expert, directly responsible for DLP capacity building and implementation in financial institutions. (experience)
• Experience designing endpoint data protection agent solutions. (experience)
• Experience detecting or analyzing internal and external data leakage. (experience)
• Experience in data lineage analysis, graph-based security analytics, or sensitive data flow tracing. (experience)
• Hands-on experience with security data models, detection rule engines, or in-house security product development. (experience)
• Prior experience building or operating data security systems within an enterprise security team. (experience)
• Hands-on experience applying AI to security detection, alert triage, or automated response. (experience)

Responsibilities

• Design the company-wide data security scheme under the new financial system, and be responsible for the implementation.
• Develop and enhance data security detection capabilities, including but not limited to DLP, data encryption and data masking.
• Continuously validate existing data security rules and models; follow up on data security incident identification, response, handling, investigation, and forensics.
• Continuously improve risk identification capabilities in data security by optimizing detection rules and models to optimize the overall detection coverage; build data asset maps; use graph detection and other techniques to trace data flows and identify sensitive data exfiltration risks.
• Explore and apply AI / LLM techniques to enhance security detection and response, and build AI-driven detection, triage, and automated response solutions.

Tags & Categories