Responsibilities
• Design and implement security controls across hybrid infrastructure (cloud, network, servers,
endpoints).
• Conduct security assessments and penetration testing of infrastructure components.
• Automate security tasks using scripts and security tooling (SIEM, EDR, IaC scanning).
• Ensure compliance with security frameworks (CIS, NIST) and Chinese regulations (MLPS, data security
law).
• Write internal documentation, runbooks, and security standards for infrastructure operations.
• Collaborate with external vendors on security hardening and remediation.
Minimum Qualifications
• 5+ years of experience in infrastructure security, security engineering, or a related technical role.
• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field.
• Hands-on experience securing cloud platforms (Azure/AWS/Ali Cloud) and on-premises
infrastructure (networks, servers, endpoints).
• Strong knowledge of networking protocols, identity management (SAML, OIDC, MFA), and security
frameworks (CIS, NIST).
• Scripting and automation experience (Python, PowerShell, or similar).
• Proficiency in English and Mandarin, both written and oral.
