北京招聘

Summary:

We are seeking a Cloud Security Engineer to join our diverse team This expert will help secure, harden, monitor, and analyze hybrid cloud infrastructure.

Responsibilities:

· Help build, maintain and manage central security policies for our cloud infrastructure.

· Help define, implement, and tune detective capabilities and data sources to detect and remediate malicious activity.

· Assist in creating a continuous monitoring solution to validate systems against our security baselines and respond to policy violations.

· Responsible for leveraging principles, practices and tools in DevOps to improve the reliability, integrity and security of applications.

· Identify and implement the most effective perimeter security models for customer integration and segregated access of platform services.

· Keep up to date on all cloud architecture and security design.

Qualifications:

· A solid understanding of information security standards.

· Experience implementing AWS security and hardening, especially in a large or complex environment.

· Experience with administration of cloud data storage and - computing solutions (AWS).

· Deep knowledge of AWS and how to configure and maintain least-privilege and segregation of duty across boundaries in a Kubernetes based environment.

· Hands-on security experience, with in-depth knowledge of security, scaling in the cloud.

· Hands-on experience with secrets management systems, including AWS KMS, Vault, SSH Keys, etc.

· Hands-on experience in driving end to end security for cloud product - scanning, pen testing.

· Experience performing threat modeling and design reviews to assess security implications and requirements for introduction of new technologies.

· Experience with managing Enterprise cloud orchestration components such as Puppet, Ansible, Chef, Kubernetes, Docker, Terraform, and CloudFormation.

· Experience in applying security to cloud technologies (Managing secrets, Securing CD pipeline, Secure Infrastructure as Code, Container Security).

· Experience with implementing a cloud-based container vulnerability scanning tool.

· Experience with Docker and Kubernetes.

· Experience with Source Control Expertise across Organizations (Git).

· Experience with CI/CD Pipeline.

· Programmatic Integration with Ticketing and Asset Management systems.

· Ability to distill complex security problems and drive toward creative solutions.

· Ability to communicate, both orally and written, with all levels of management and end users across varying levels of technical backgrounds.

· BS degree in Computer Science, Information Technology or relevant field Highly Desired Skills.

· 5-10 years total tech experience with cloud security focus.

· 3+ years of AWS or GCP experience implementing security and hardening activities, especially in a large or complex environment.

· 5+ years working in a CI/CD DevSecOpsungl environment (Jenkins, Travis, Jira, GitHub, GitLab, etc.)

Good to Have:

· Amazon AWS Certified Solutions Architect - Professional, Amazon AWS Certified DevOps Engineer – Professional

· Knowledge of PII compliance requirements for ad tech industry such as GDPR, CCPA.

· Familiarity with PCI, SOC2, SOX, and ISO standards.

· Agile/SCRUM experience.

· Programming in Python and Go.

· Comfortable generating automated metrics to measure service and program effectiveness and consistency.

· Ability to manage multiple vendors, contracts, and 3rd party escalations.

· Web server/client architecture and implementation experience.

· Have an ability to translate compliance and security requirements into product requirements.

· Application Security.

福利待遇：

1、13薪+年终奖（1-3个月）带薪年假10天+带薪病假12天+六险一金（全额基数缴纳保险公积金）+年度体检+礼品（生日、结婚、生育、端午、中秋等） ；

2、提供员工班车，日常工作餐，带薪年假，自驾员工提供免费停车场。

3、多元化的员工培训（技能培训、拓展培训、英语培训等）；

4、健全的员工关怀机制，公司设有健身俱乐部，提倡员工健康生活，快乐工作；

5、公司内部培训和晋升体系完善，每年有国外出差工作机会，每年度薪资涨幅美丽。

大连隆基科技始创于2009年，是一家以计算机软件技术为核心，通过软硬件产品结合研发的策略，为各行业提供优质的信息化产品及解决方案的高科技公司。业务范围覆盖技术咨询、调研分析、方案设计、软件开发、系统集成、售后支持等服务，专注于高科技、金融、医药、制作等领域并积累了丰富的经验。
隆基通过多年积累，已经形成了包括：行业解决方案、应用解决方案、工具平台解决方案、企业基础数据平台解决方案、基础设施平台等多种服务于企业全面IT战略的综合解决方案。提供的服务涵盖了“企业咨询服务、企业数据服务、企业应用服务、企业治理服务”全部领域。

隆基总部位于大连，在上海、北京等地分别设立研发团队，形成了一个包含资深业务专家、项目经验丰富的管理人员及优秀的技术研发人才在内的团队。

公司将以绿色IT战略、绿色IT咨询服务为宗旨，将帮助您低碳减排。为客户提供先进的技术，提供安全、可靠、高质量、易扩展的行业解决方案；以专业化的服务宗旨，帮助客户实现信息化管理的***实践方式，以满足客户在业务快速发展下的不同需求。