【上海 Senior Cyber Security Manager招聘】-猎头顾问上海招聘信息-猎聘

刘女士 2天前在线已认证

高级咨询顾问 · 上海瀚纳仕人才管理咨询有限公司

聊一聊

职位介绍: How You Contribute: Security Operations Security Operation Center • Oversee the operations of the MSOC, ensuring 24/7 threat monitoring, detection, and response. • Define and maintain MSOC processes, including incident triage, escalation protocols, and threat intelligence integration to enhance situational awareness. • Lead incident response efforts, conducting root cause analyses and implementing remediation strategies to prevent recurrence. • Collaborate with MSOC teams to optimize workflows, reduce mean time to detection (MTTD) and mean time to response (MTTR), and improve overall incident response effectiveness. • Conduct regular MSOC performance reviews, ensuring alignment with service-level agreements (SLAs) and key performance indicators (KPIs) such as incident resolution rates and false positive reduction. • Actively participate in the Group’s security incident management process, ensuring timely escalation and transparent communication with the Group Cybersecurity department. • Collaborate closely with the Group Cybersecurity department to align on policies, standards, and incident response protocols. • Report key security metrics and incident learnings to Group SOC team and participate in group-wide security exercises • Oversee endpoint protection, data loss prevention (DLP), and network security initiatives, ensuring robust defenses against cyber threats. Security Tools management • Own the proper configuration, regular updates and optimal functioning of all security tools, including intrusion detection and prevention systems, email protection, antivirus software, firewalls, WAF and XDR solutions • Manage relationships with MSSP partners, evaluate their services and drive improvement, negotiating contracts to ensure cost-effective, high-quality services that align with organizational security needs. • Monitor MSSP performance through regular audits, ensuring compliance with agreed-upon SLAs and security standards, and addressing any service gaps or escalations. • Manage & oversight security solutions & technical policies – firewalls, email & web security, Endpoint, cloud security & solutions. • Active assesses the effectiveness of security tools, propose enhancements, and implement improvements to strengthen the overall security posture. Security Infrastructure posture management and Enhancement • Work closely with the IT Infrastructure and Operations team to secure IT infrastructures, including networks, endpoints, and cloud environments. • Contribute to and validate the IT Infrastructure designs from a security perspective and assist operational teams in identifying and implementing appropriate measures for discovered vulnerabilities. Leadership and Mentorship: • Provide cybersecurity guidance and mentorship to more less experienced team members. • Actively collaborate with the global SOC team to share knowledge, develop best practices, and continuously improve security processes and protocols. Role Qualifications: • Solid knowledge and experience of security tools for vulnerability scanning, penetration testing, and compliance (e.g., Snyk, Qualys, Nessus, OWASP ZAP). • Experience with CI/CD tools (Jenkins, GitLab CI, CircleCI) and version control systems (Git). • Proficiency in cloud platforms (AliCloud, AWS, Azure) and their security services and solutions • Expertise in IaC tools (Terraform, Ansible, CloudFormation) and containerization technologies (Docker, Kubernetes). • Scripting skills in Python, Bash, or Go for automation and tooling. • A genuine passion for technical cybersecurity, and a deep desire to learn and drive change. • Minimum of 5-7 years of experience, bachelor degree in Computer Science, Information Security, or a related field. • Advanced certifications (e.g., CCNSE, CCSE, CKS, CKA, GIAC Pen-Tester, CISSP, CISM, CEH, CompTIA Security +) are a strong plus. • Knowledge of security tools and technologies, including SIEM, SOAR, firewalls, antivirus & EDR software, and Web & email protection systems. • Deep understanding of networking protocols, security technologies, and best practices • Excellent communication, collaboration & interpersonal skills. • Ability to work collaboratively in a fast-paced environment and effectively prioritize and manage multiple tasks and projects. • Proficient in English and Mandarin.

其他信息: 语言要求：普通话 + 英语; 行业要求：人力资源服务

猎聘温馨提示：

1. 如您发现平台内招聘方存在以下违规行为的，请立即举报

· 扣押您的身份证件或者其他证件；
· 要求您提供担保人、担保金或者以其他名义向您收取财物（如培训费、体检费、资料费、置装费、押金等）；
· 强迫您入股或者向您集资；
· 以招聘名义牟取不正当利益；
· 发布虚假招聘广告信息；
· 工作时长违反劳动法规定；
· 存在其他损害您的合法权益的行为。

2. 如您应聘的岗位属于涉外劳务合作/海外岗位的，请务必核实招聘方对外劳务合作资质取得情况，同时注意自身资金安全，防范招聘欺诈。

猎聘温馨提示：

猜你喜欢