北京招聘

Job ID 852554
Location China, Beijing
Job Category Legal & Corporate Affairs
Division Legal & Corporate Affairs

The Network Security Investigations & Forensics team is a core unit within Microsoft’s Trustworthy Computing organization and is responsible for investigating escalated internal and external threats to the company and the corporate network. We provide technical expertise and investigative services to a variety of groups including: Legal and Corporate Affairs, Human Resources, Physical Security Investigations, the Financial Integrity Unit, and many others. In addition, the group provides more traditional subject matter and design expertise in a number of areas related to network security matters and information security policies. The successful candidate for this position will train in Redmond for 1-2 months, but will eventually be based in Beijing.

Travel: Regular travel required as needed, up to a maximum of 40%, primarily within Greater China Region.


Primary Responsibilities:

- Conduct global IT based security investigations regarding breaches of policy, violations of standards of business conduct, hacks, leaks, and other escalated information security cases.

- Provide expert technical guidance to other Microsoft groups and senior management regarding the technical and forensic aspects of major incidents and sensitive cases. Provide feedback and recommendations for remediation and policy changes

- Develop, implement and refine industry leading procedures and methodologies for the conducting of forensic review of Microsoft platforms, applications, and information technology infrastructures

- Perform forensic media acquisition and analysis

- Communicate complex technical or evidentiary information and findings with internal customers and law enforcement agencies, if necessary

- Develop investigative plans, derive root causes from case facts and prepare executive level briefings

- Proactively research new forensic technologies applicable across the enterprise, as well as the latest malicious technologies. Research includes the continuous assessment of the forensic implications of evolving and new Microsoft technologies, platforms, applications and data structures

- Devise remediation steps for affected internal clients after an incident has occurred

- Keep abreast of developments in the areas of privacy and legal issues internationally



Desired Background & Skillsets:

- Strong familiarity with applicable local region domestic and international laws and regulations pertaining to information asset protection

- Solid understanding of forensic methodologies, including in-depth knowledge of computer incident response processes, Microsoft file internals, as well as 'live' incident response techniques

- Extensive host forensic analysis skills including strong hardware knowledge and skills, particularly with media and data storage, forensic imaging, and detailed file system level analysis

- Strong experience with common forensic tools such as Encase, FTK, Winhex, etc.

- Demonstrable knowledge of rootkits, monitoring mechanisms, remote control services

- Excellent written and verbal skills, including the ability to effectively communicate complex technical information to non-technical audiences. Must be able to lead presentations to senior management

- Prior investigative experience a plus

- Minimum of 8 years of demonstrated, relevant Information Security or related technical experience

- Must be fluent in Mandarin

- Must be able to obtain necessary work permits and travel visas where applicable

- Ability to be available “on call” on a 24 / 7 basis

- Successful applicants will be subject to a satisfactory background check.

- Please kindly notice that the location can be considered in other areas in China Mainland, not just in Beijing.

Microsoft is an equal opportunity employer and supports workforce diversity.
GCR:CN:Sales:EN
CR:TWC

微软本着与合作伙伴共同成长、共同发展的宗旨深入开拓中国本地市场。作为一家软件平台厂商，微软通过合作伙伴业务模式，努力促进信息技术产业生态系统的建设。我们通过合作伙伴把微软的产品和服务送到用户手中，通过合作伙伴基于微软的平台开发丰富的、最适合中国市场的应用产品和解决方案来满足用户的需求。

        微软与政府有关部门及其他机构合作，积极推动缩小数字鸿沟，以帮助各层次、各地区的人们实现自己的最大潜能。多年来，无论是开展“携手助学”支持农村和边远地区教育、推进“农村信息化”建设让农民通过信息技术脱贫致富，还是实施“潜力无限”项目，合作成立社区学习中心，扶助弱势人群，都体现了我们致力于成为优秀企业公民的不懈努力。

        微软通过开发众多的软件产品和服务并提供相应的生产、授权和支持，向用户传递商业价值。目前，微软在中国业务涉及Windows客户端、服务器平台和开发工具、信息工作者产品、微软商务管理解决方案、移动及嵌入式设备、MSN和家庭消费及娱乐产品等七个方面。


        欢迎浏览公司网站：http://www.microsoft.com/china