Reports To: Delivery Team Lead / Technical Director / SOC Security Operations Lead
1. Delivery and implementation of security products
• Responsible for the on-site deployment, installation and debugging, configuration changes,
system launch, and acceptance of the company's network security products (including SIEM,
NDR, EDR, firewalls, SandBox, etc.), ensuring the project is delivered on time and with high
quality.
• According to customer requirements and the established technical solution, complete the
installation, debugging, policy configuration, and optimization of security devices.
• Participate in the functional testing, compatibility testing, and on-site environment verification
of the product prior to delivery, ensuring the stability of the system.
2. Technical support and troubleshooting
• Provide remote and on-site technical support for customers, respond to and handle technical
problems during product operation in a timely manner, and complete troubleshooting and
emergency response.
• Master the technical architecture and technical details of Huawei products, and be able to
troubleshoot software system faults on site.
• This document provides guidance for users to solve the problems encountered during the use
of the product and answers technical questions of users.

1. Cybersecurity Product Skills
SIEM (Security Information and Event Management)
• Be familiar with the architecture, deployment, log source integration, and parser development of the SIEM platform.
• Have experience in developing and optimizing secure use cases (Use Cases), and understand the writing of detection rules (e.g., SPL, KQL)).
• Understand the SOC operational process, including log ingestion, alert triage, and incident handling.
NDR (Network Detection and Response)
• Familiar with the deployment architecture and operation and maintenance management of NDR products.
• Understand network traffic analysis and threat detection, including abnormal trafficidentification, lateral movement tracking, data exfiltration detection, etc.
• Familiar with network protocols such as TCP/IP, DNS, HTTP/S, etc.
EDR (Endpoint Detection and Response)
• Familiar with the implementation, configuration, and policy optimization of mainstream EDR platforms.
• Understand endpoint security, threat detection, and incident response processes.
• Familiar with the MITRE ATT&CK framework and threat hunting methods.
Firewall
• Familiar with the architecture planning, policy design, and configuration management of mainstream firewalls (e.g., Huawei, Palo Alto, Fortinet, Check Point, etc.).
• Familiar with firewall deployment, policy optimization, and troubleshooting.
SandBox
• Understand the deployment and operation and maintenance of sandbox products.
• Familiar with the malicious file analysis process and the sandbox detection mechanism.
2. Network and System Fundamentals
• Proficient in the TCP/IP protocol stack, and skilled in routing and switching technologies (OSPF/BGP/VLAN/VPN, etc.)
• Familiar with the configuration and debugging of network devices from major vendors (Huawei, H3C, Cisco, Ruijie, etc.)
• Familiar with Linux operating system management, and capable of writing Shell/Python scripts.
• Possesses the ability to troubleshoot network issues, and is proficient in using packet capture and analysis tools (Wireshark/tcpdump).
3. Comprehensive qualities
• Bachelor's degree or higher, with a major in computer science, networking, communications, cybersecurity, or related fields.
• More than one year of experience in implementing and delivering network or security products.
• Possesses excellent customer communication skills, a strong team spirit, and the ability to write and compile documents.
• Strong sense of responsibility, able to adapt to project pressure, and possesses good self-motivation and continuous learning ability.
• Able to adapt to short-term business trips, and independently handle on-site emergencies.
Priority Conditions (Bonus Points)
Candidates with the following experience will be given priority:
1. Experience in cybersecurity operations
• Has experience operating a Security Operations Center (SOC) and is familiar with the 7x24-hour security monitoring and alarm analysis process.
• Has experience in managed security services (MSS).
• Has experience in defensive drills and defensive operations.
2. Experience in offensive and defensive penetration testing.
• Familiar with security processes such as penetration testing, vulnerability scanning, and intrusion detection.
• Possesses basic knowledge of internal network penetration.
• Independently handled emergency incidents related to network security intrusions.
• Participated in mainstream cybersecurity competitions and achieved rankings.
3. Experience in security auditing
• Understand the standards for building a cybersecurity system.
• Have relevant experience in security auditing and risk assessment.
• Understand compliance frameworks such as NIST and ISO 27001.
4. Other Bonus Points
• Holding security or network certifications such as HCIA-Security, CISSP, CISA, CISM, CEH, CCNP/CCIE, CISP, etc.
• Developed cybersecurity tools or published highly cited open-source projects.
*** Working time and benefits:
• Monday to Friday ([protected info]).
• Short term and Long-term awards
• Huawei University online and offline aboard training.
• Competitive Salary and Service performance bonus. Full salary in 2 months of probation.
• Participating in full insurance benefits (health insurance, social insurance, unemployment insurance), the company supports 24/24 accident insurance and health care insurance for employees.
• Professional working environment, multinational company, good career development opportunities. Cultural and sports activities, taking care of employees' health and life are organized periodically.