CyberSOC Manager 1位 Security Analyst 2位 Security Analyst实习生(可转正) 2位
岗位名称:CyberSOC Manager
工作地点:
上海
岗位描述:
As a Managed Security Service Provider (MSSP), we are seeking an experienced and dynamic CyberSOC Manager in our Cyber Security Operations Center (CyberSOC) team. The ideal candidate will possess a deep understanding of cybersecurity, incident response, and threat detection methodologies. The CyberSOC Manager will be responsible for overseeing the day-to-day operations of the CyberSOC, managing a team of security analysts, and ensuring the effective detection and response to cybersecurity threats from customers.
岗位职责:
CyberSOC Operation Optimization:
Identify opportunities for process optimization within the CyberSOC operations
Collaborate with internal teams to refine and document processes, ensuring eficiency and compliance.
Integrate industry best practices into both technical and operational processes.
Manage the full lifecycle of cybersecurity projects, from client engagement and requirements gathering to solution delivery and ongoing support.
Develop detailed project plans, timelines, and resource allocation strategies.
Holistic Solution Architecture:
Architect end-to-end cybersecurity solutions that encompass both technical and process elements.
Collaborate with the sales and consulting teams to translate client requirements into comprehensive cybersecurity architectures.
Develop solution documentation to clearly articulate the proposed cybersecurity measures and processes.
Client-focused Collaboration:
Work closely with clients to understand their unique security requirements and tailor CyberSOC services accordingly.
Participate in client meetings and present cybersecurity insights, incident reports, and recommendations.
Foster strong client relationships through effective communication and a proactive approach.
Team Leadership
Lead, mentor and develop a team of skilled cybersecurity analysts.
Foster a collaborative and high-performance team culture.
Provide guidance and support for ongoing professional development.
Continuous Improvement:
Drive continuous improvement initiatives within the CyberSOC, both from a technical and process perspective.
Proactively seek feedback from clients and internal stakeholders to enhance solution architectures.
Stay abreast of industry trends and emerging technologies to inform ongoing improvements.
技能要求:
Experience working in a managed security service provider (MSSP) environment.
Familiar with cyber security products, datacenter and Alibaba and AWS cloud platform.
Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
Proven experience (8 years) in a cybersecurity role, with a focus on incident detection and response.
Strong project management skills with a track record of successful project delivery.
In-depth knowledge of cybersecurity principles, practices, and technologies
Relevant certifications such as CISSP, CISM, or equivalent.
Demonstrate strong English language proficiency, both written and verbal.
Excellent communication and interpersonal skills.
岗位名称:Security Analyst
工作地点:
上海
岗位描述:
We are seeking diligent and skilled Cyber Security Analyst to join our dynamic team, a leading Managed Security Service Provider. The Security Analyst will play a crucial role in our CyberSOC operations, focusing on detecting and responding to cybersecurity incidents for our diverse range of clients. The ideal candidate should possess strong analytical skills, a deep understanding of cybersecurity concepts, and the ability to thrive in a fast-paced environment.
岗位职责:
Incident Detection and Response:
Monitor security alerts and events using advanced SIEM tools.
Work day and night shifts as required to ensure comprehensive cybersecurity coverage.
Conduct in-depth analysis of security incidents, identifying potential threats andvulnerabilities.
Collaborate with the CyberSOC team to implement effective incident response strategies.
Documentation on security monitoring delivery and time spend.
Security Monitoring and Analysis:
Regularly review logs and reports to identify anomalous activities and potential security risks.
Analyze network traffic patterns to detect and respond to malicious activities.
Stay abreast of emerging threats and contribute to proactive threat hunting efforts.
Keep improving of the current detection framework from both the technical and documentation perspective.
Client Interaction:
Act as a contact for clients, addressing security-related inquiries and concerns.
Communicate effectively with clients on incident updates, findings, and recommendations.
Collaborate with clients to enhance their overall cybersecurity posture.
Project Delivery:
Support add-hoc security service project delivery, including but not limited to penetration testing, vulnerability scanning, incident investigation, security assessment.
Support the new customer onboarding and integration projects.
Support emerging vulnerability analysis and exploitation testing.
Other Job Requirements:
Complete mentor assignment, to provide guidance for new team members on current technical environments and the existing work process.
Join the collaborative and knowledge-sharing environment within the team.
Build strong relationships with clients and being open to the client’s onsite opportunities.
Understand and adapt to the company's workload/business, managing time effectively to meet project deadlines.
技能要求:
Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
1 year experience in a security analyst or related role.
Programming skills in languages such as Python, PowerShell, or other relevant scripting languages.
Strong understanding of cybersecurity principles and best practices.
Experience with security information and event management (SIEM) tools.
Relevant certifications such as CompTIA Security+, Certified Information Systems Security
Professional (CISSP), or equivalent.
Excellent analytical and problem solving skills.
Effective communication and client interaction skills.
English language written is required.
Security Analyst实习生(可转正)
工作地点:
上海
岗位职责:
实时监控和分析网络环境中产生的告警
通过日志分析平台或其它工具对出现的告警进行深入调查及响应
定期在网络环境中进行威胁搜索,发现潜在的威胁
技能要求:
具有信息安全或相关专业本科教育背景
熟悉常见安全产品,如防火墙,WAF,EDR等
熟悉渗透测试流程和内容
了解公有云和云安全基本知识
具有安全日志分析经验者优先
关于我们
Orange Cyberdefense 是 Orange 集团旗下的专业网络安全业务公司,为全球组织提供安全管理、威胁检测与响应等托管服务。作为世界领先的安全提供商,我们致力于保障网络空间安全并构建一个更安全的数字社会。
凭借在信息安全领域超过25年的经验,3000名专家、18个SOC和14个 CyberSOC遍布全球,我们知道如何解决客户的全球和本地问题。在中国,我们的业务涵盖24/7/365安全托管检测与响应中心、渗透测试 、漏洞扫描、补丁管理、遭受网络攻击后的调查取证等,并确保跨国企业在国内满足信息安全相关法律的规定。
联系我们
推荐站内搜索:最好用的开发软件、免费开源系统、渗透测试工具云盘下载、最新渗透测试资料、最新黑客工具下载……
还没有评论,来说两句吧...