Build and maintain the company’s security operations framework and daily monitoring systems.
Monitor, analyze, and respond to security incidents, anomalies, intrusions, and other suspicious activities.
Perform log analysis, threat detection, and alert handling.
Manage and optimize security tools such as SIEM and EDR.
Support cloud security configuration and risk assessment, especially in AWS environments.
Develop, refine, and implement security policies, processes, and standards.

3–5 years of experience in security operations, SOC, or related cybersecurity roles.
Strong knowledge of mainstream security technologies such as firewalls, IDS/IPS, SIEM, and EDR.
Experience with log analysis, threat modeling, and incident response.
Good understanding of AWS security architecture and cloud security best practices.
Strong communication skills in Chinese and English (C1 level for both).
Experience with automation or SOAR tools is a plus.
Red team and blue team experience is a plus.

Security Operations Engineer

Key skills