Security Operation Engineer (Soc)

Responsibilities Handle 7 × 24 hour security incident response.
Formulation and implementation of security response plan and security assurance for the whole life cycle of the company system.
Lead the team to enhance the ability of security situation perception.
Requirements 5 years+ security emergency response experience.
Experienced in intrusion detection, event tracing and log analysis.
Familiar with common attack and protection methods, deep understanding of the principles, utilization methods and solutions of common security vulnerabilities.
Experienced in malicious feature extraction ability, familiar with Yara rules, have TTP analysis.
Strong security techniques research ability to lead teams quickly iterate to new technology means or solutions.
Familiar with EDR, HIDS solutions.
Big data development foundation, familiar with Hadoop, Splunk, Elasticsearch, etc.
Deep understanding of security operations: border defense, internal threats, risk management, etc.
Team management experience.
High stress handling ability, adapt to high-intensity work, have good communication ability.
#J-18808-Ljbffr