Descripción del puesto
About The Business
Trust, resilience and security connecting for enduring success and responsible business
With competencies encompassing capital markets, control assurance, contractual exposure and insurance claims, and security services, our RA professionals offer a wealth of experience across a spectrum of industries. This is a great place to build a career and make an impact that really matters.
We help clients address various aspects of Cyber and other strategic risks to their organizations to inform risk-based strategic choices, prepare to respond to disruption, assess and manage full-lifecycle enterprise risks, as well as strategize and respond to risks associated with the reliability and protection of data, associated processes and technology. We provide advisory and managed services to help senior executives spot, assess, manage, and respond to risks and/or catastrophic unforeseen incidents that could undermine their competitive position or jeopardize their critical assets, reputation and/or financial standing.
Our objective is to help clients develop and implement strategies for IT risk management and aim to help clients find the appropriate balance between risk management and cost containment. Our integrated solutions covering: Cyber Strategy, Cyber Security, Cyber Vigilance, Cyber Resilience.
Work you'll do
安全监控与事件响应
负责安全设备（防火墙、WAF、EDR、SIEM/SOC等）监控，对安全告警进行实时分析与研判；
独立完成中低危安全事件的调查、溯源、处置及闭环，确保风险及时收敛；
参与高危事件协同处置，执行应急响应流程，降低业务安全风险。
熟悉常见Web/系统漏洞原理，协助评估漏洞风险影响，推动漏洞全生命周期闭环
系统与主机安全排查
基于Windows/Linux系统进行异常行为排查（如恶意进程、可疑外联、账号异常等）；
配合完成主机加固及安全基线核查。
威胁分析与规则优化
定期分析安全日志与流量数据，优化告警规则，开展误报降噪，提升检测准确率；
结合威胁情报进行简单落地应用，增强对新型攻击的感知能力。
效率提升与自动化探索
熟悉SOC运营流程，能够识别重复性工作场景；
具备一定自动化脚本/工具开发能力，推动安全运营效率提升。
运营规范与文档沉淀
严格执行SOC运营流程及巡检机制，按时输出安全周报、月报及专项分析报告；
独立编写事件处置报告、复盘小结，规范记录处置过程，沉淀运营经验。
We are looking for someone with
1、计算机科学、网络安全或相关专业本科及以上学历。
2、1年以上安全运营或相关领域工作经验，熟悉常见的安全威胁和攻击手段，有过磐石行动等护网经验或参与过真实攻击的应急响应。
3、熟练掌握安全监控和分析工具，如SIEM、IDS/IPS、防火墙等。
4、具备良好的英文听说读写能力，英文可作为工作语言。
5、具备良好的沟通能力和团队合作精神，能够与不同部门有效协作。
6、具备较强的学习能力和适应能力，能够快速掌握新的安全技术和工具。
7、有责任心，能够在压力下保持冷静，处理紧急安全事件。
加分项：
1、持有相关安全认证，如CISSP、CISM、CISA等。
2、有安全事件响应和取证分析经验者优先。
3、熟悉网络安全法律法规和合规要求。
4、有编程或脚本编写能力，能够自动化安全运营流程。
Shape your future through impact that matters
For more than 100 years of history, Deloitte witnessed also had the honor to be part of the economic boom in China by providing industry-leading audit & assurance, consulting, risk advisory, financial advisory, tax & business advisory services to nearly 90% of the Fortune Global 500 Chinese companies and thousands of private companies. Deloitte China today carries on our centenary professionalism and strives to become the undisputed leader in professional services in China with strong responsibility and capabilities in digitalization and multidisciplinary services.
Deloitte has been named China's Top Employer since 2006, Universum's Most Attractive Employer in China since 2008, and the Best Workplaces in Greater China since 2019.
All qualified applicants will receive consideration for employment regardless of their background, experience, identity, ability or thinking style, and if you need assistance during the application process for accessibility reasons this is available upon request. The preferred candidate will be subject to background screening by Deloitte China or by their external third-party provider.
Accessibility assistance
If you need assistance or an accommodation during the recruitment process for accessibility reasons, there will be an opportunity for you to let us know what you need once you begin your application.
Ready to take on new challenges? Apply now!
Stay connected for the latest career opportunities, follow us on Deloitte China Social Media.
Trust, resilience and security connecting for enduring success and responsible business
With competencies encompassing capital markets, control assurance, contractual exposure and insurance claims, and security services, our RA professionals offer a wealth of experience across a spectrum of industries. This is a great place to build a career and make an impact that really matters.
We help clients address various aspects of Cyber and other strategic risks to their organizations to inform risk-based strategic choices, prepare to respond to disruption, assess and manage full-lifecycle enterprise risks, as well as strategize and respond to risks associated with the reliability and protection of data, associated processes and technology. We provide advisory and managed services to help senior executives spot, assess, manage, and respond to risks and/or catastrophic unforeseen incidents that could undermine their competitive position or jeopardize their critical assets, reputation and/or financial standing.
Our objective is to help clients develop and implement strategies for IT risk management and aim to help clients find the appropriate balance between risk management and cost containment. Our integrated solutions covering: Cyber Strategy, Cyber Security, Cyber Vigilance, Cyber Resilience.
Work you'll do
安全监控与事件响应
负责安全设备（防火墙、WAF、EDR、SIEM/SOC等）监控，对安全告警进行实时分析与研判；
独立完成中低危安全事件的调查、溯源、处置及闭环，确保风险及时收敛；
参与高危事件协同处置，执行应急响应流程，降低业务安全风险。
熟悉常见Web/系统漏洞原理，协助评估漏洞风险影响，推动漏洞全生命周期闭环
系统与主机安全排查
基于Windows/Linux系统进行异常行为排查（如恶意进程、可疑外联、账号异常等）；
配合完成主机加固及安全基线核查。
威胁分析与规则优化
定期分析安全日志与流量数据，优化告警规则，开展误报降噪，提升检测准确率；
结合威胁情报进行简单落地应用，增强对新型攻击的感知能力。
效率提升与自动化探索
熟悉SOC运营流程，能够识别重复性工作场景；
具备一定自动化脚本/工具开发能力，推动安全运营效率提升。
运营规范与文档沉淀
严格执行SOC运营流程及巡检机制，按时输出安全周报、月报及专项分析报告；
独立编写事件处置报告、复盘小结，规范记录处置过程，沉淀运营经验。
We are looking for someone with
1、计算机科学、网络安全或相关专业本科及以上学历。
2、1年以上安全运营或相关领域工作经验，熟悉常见的安全威胁和攻击手段，有过磐石行动等护网经验或参与过真实攻击的应急响应。
3、熟练掌握安全监控和分析工具，如SIEM、IDS/IPS、防火墙等。
4、具备良好的英文听说读写能力，英文可作为工作语言。
5、具备良好的沟通能力和团队合作精神，能够与不同部门有效协作。
6、具备较强的学习能力和适应能力，能够快速掌握新的安全技术和工具。
7、有责任心，能够在压力下保持冷静，处理紧急安全事件。
加分项：
1、持有相关安全认证，如CISSP、CISM、CISA等。
2、有安全事件响应和取证分析经验者优先。
3、熟悉网络安全法律法规和合规要求。
4、有编程或脚本编写能力，能够自动化安全运营流程。
Shape your future through impact that matters
For more than 100 years of history, Deloitte witnessed also had the honor to be part of the economic boom in China by providing industry-leading audit & assurance, consulting, risk advisory, financial advisory, tax & business advisory services to nearly 90% of the Fortune Global 500 Chinese companies and thousands of private companies. Deloitte China today carries on our centenary professionalism and strives to become the undisputed leader in professional services in China with strong responsibility and capabilities in digitalization and multidisciplinary services.
Deloitte has been named China's Top Employer since 2006, Universum's Most Attractive Employer in China since 2008, and the Best Workplaces in Greater China since 2019.
All qualified applicants will receive consideration for employment regardless of their background, experience, identity, ability or thinking style, and if you need assistance during the application process for accessibility reasons this is available upon request. The preferred candidate will be subject to background screening by Deloitte China or by their external third-party provider.
Accessibility assistance
If you need assistance or an accommodation during the recruitment process for accessibility reasons, there will be an opportunity for you to let us know what you need once you begin your application.
Ready to take on new challenges? Apply now!
Stay connected for the latest career opportunities, follow us on Deloitte China Social Media.
¿Listo para aplicar?
Esta oferta fue agregada desde LinkedIn. Al hacer clic serás redirigido al sitio original para completar tu postulación.
Aplicar en la fuente ↗