Engineer, Information Security

Job Summary

Universal Beijing is seeking an engineer of Information Security. S/he will be responsible for security operation and response, provide integration support for SIEM/SOC platform, managing security tools, to be a security expert to improve system security by providing professional advice.

S/he will help company to identify flaws in current security defense architecture based on technical analysis, will contribute to monitors security alerts and respond to security incidents, handling cyber threats, and anticipate data breaches by ethically hacking.

Major Responsibilities

•Manage and respond to security incidents to ensure and support the continuity and growth of Universal Beijing business operations.

•Monitor network traffic and system behaviors from security perspective to detect possible threats and respond to threats immediately.

•Investigating the incidents, handle priority security alerts from different security tools and reports (phishing email, malware, intrusion, data leak, vulnerability, etc.) in timely manner.

•Demonstrated experience with common penetration testing and vulnerability assessment tools such as AppScan, ZAP, SQL Map, assisting team members in closing vulnerabilities.

•Automating and developing tools to improve security detection and response capability, managing or administering security engineering projects.

•Carrying out information security baseline checks and proposing countermeasures for information protection.

•Anticipate data breaches by ethically hacking while determining future flaws and their prevention.

•Participate in Blue/Red teams exercise to test and improve company security monitoring and response capabilities.

•Doing root cause analysis for any incident and publish findings in form of reports.

•Describe and training playbooks for responding to the major cybersecurity incidents.

Qualifications

•6+ years of working experience, cybersecurity, information security, software development, incident management preferred.

•Solid knowledge of vulnerability management, pen-testing and security baseline checks.

•Solid practicing knowledge of web development languages (Java, C#, JavaScript, etc.), Script development languages (Shell, Python, Lua, etc.), familiar with API system integration development.

•Working knowledge of SQL, ELK/OpenSearch/Splunk, etc., ability to handle large amounts of data, identify key information by exploring logs with statistical concepts.

•Knowledge of MLPS, Cyber Security Law, PIPL and Data Security Law.

•Self-motivated & accountable, with a high level of commitment to responsibility.

•Strong work ethic, with the ability to remain impartial and report noncompliance.

•Excellent verbal and written communication. Capable of adopting a variety of styles to achieve the desired results and build consensus with diverse partners.

•Ability to develop and deliver training materials.

•Able to work in cross-cultural environment.

•Knowledge of IT or security operation in the theme park or resort is preferable.

Education

•Bachelor’s degree from an accredited college (Information Technology, Computer Science and Technology, Cyber Security or related disciplines preferred)

•Qualifications in information security development and management, CISP or CISSP is preferred