Responsible for reviewing and processing the logs generated by the security equipment and the alarm work orders of the security operation center platform
Responsible for the response and remediation of security emergency incidents, and output necessary service reports and reporting materials
Responsible for assisting in the construction of the safe operation platform, insight into customer needs, and optimizing the platform's safe operation capabilities
Required Skills
Bachelor's degree or above, familiar with TCP/IP protocol, routing and switching, and a good understanding of security principles.
Familiar with security technologies such as NGFW, WAF, IPS, Endpoint security, XDR, EDR, NDR.
Good understanding of remediation methods for common security incidents.
Experienced in identifying threats and analyzing incidents from security alerts and logs from security devices.
Experienced in remediation for security incidents and threat response based on available security technologies.
Experienced in facing customers in incident handling and problem solving.
Preferable candidates with Incident Responder certifications such as GCIH, ECIH, or CCIM.
Certifications such as CISSP, OSCP, CEH is good to have but not mandatory.
