成都招聘

Position Description



SUMMARY:

The Security Engineer works with other technical teams on complex cross-functional projects. He/She is responsible for the day-to-day security of an e-Commerce enterprise, focusing primarily on security policy, compliance, and strategy, with involvement in leading daily task work. This person will also be responsible for coordinating incident responses with customer's security team as appropriate.

Position Requirements

*********************************************************************

Requirement Highlight:

1. SSL Digital Certificate Management

2. LDAP Account Review and Management

3. Firewall Review and Management

4. Account Access Privilege Review and Management

5. Vulnerability Remediation

6. Monitor security baseline of network / application traffic

7. Liaison in Security Incident Response

8. Participate in InfoSec projects and processes review

9. Analyze security syslogs and investigation

10. CISSP preferred



*********************************************************************
FUNCTIONAL COMPETENCIES:


? Basic technical knowledge of Solaris, Linux and Windows operating systems
? Proven ability to create effective security policies, standards and procedures
? Broad knowledge of networking, routing protocols switching and remote access methodologies
? Solid project management and problem-solving skills
? Ability to consistently hit deadlines and keep security projects on track, facilitate handoffs from one functional area to another, raise red flags, follow-up on success of security projects, identify dependencies and risks, and understand the architectural impact on projects and decisions made during the project
? Be familiar with IDS/IPS, Vulnerability assessment tools, Log management tools, Firewalls, Cryptography and Digital Certificates
? Explains technical possibilities and limitations well enough to effectively inform non-engineering team members
? Ability to see the bigger picture and recommend strategies for improving security as well as managing the implementation details
? Proficient in AAA-related technologies
? Understands cyber security legal issues and impact, and readily identify potential threats
? Knowledge of Software Development Lifecycle (SDLC)
? Ability to articulate advanced technical topics (e.g., TCP protocol analysis)
? Unix shell prowess



REQUIRED QUALIFICATIONS:
? 3+ years of experience in a variety of IT disciplines, including system, network and development
? Proven experience with incident response and forensics
? Demonstrated effectiveness by successfully leading large-scale, complex projects
? Supported projects through all phases: vision development; selling; design; develop; deploy; and has supported the product when operational
? Experience with analyzing business requirements and designing solutions
? Experience in implementing application security solutions
? Experience with (either as a customer or auditor) regulatory compliance audits such as PCI DSS, ISO 17799, CA SB 1386, etc.


EDUCATION & CERTIFICATIONS:
? B.S. in Computer Science or equivalent experience
? CISSP preferred. Other IT Security related certification a plus

About Bleum
We are one of China's leading outsourcing providers to American and European companies in a variety of sectors including high-tech, financial services, telecommunications, and retail. We create global development centers and provide services such as application development, support and maintenance, testing, and legacy system modernization. American owned and managed, Bleum especially understands the language, business culture, and expectations of western-based IT organizations.

Opportunities, growth, learning, respect, partnership and harmony, all for you! Obtain a glorious career path, Bleum offers free English training courses to improve the skills of our staff. Professional foreign English teachers design various training courses tailored to each employee to adapt to the 100% English only working environment. The best overseas working opportunities are also a possibility.

博朗是中国领先的针对欧美企业的外包提供商之一 涉足高科技、金融服务、电信和零售业等多项领域。公司致力于建立全球开发中心，提供诸如应用程序开发、支持维护、测试和现有系统的更新。作为美商独资及管理的企业，我们不仅可以与客户进行流畅的沟通，深刻了解他们的商业文化，更深知客户的需求与期望。

通过为客户提供基于长期合作关系的软件开发服务，并拥有先进的技术及基于CMM5的规范的管理流程，博朗为员工提供非常稳定的软件开发环境。博朗注重员工的个人发展，每年为员工提供各种培训课程，除了系统专业的技术培训、研讨外，公司致力于不断提升员工的英语应用水平，提供100%英语工作环境，专职英语外籍教师根据员工不同的英语水平设计培训课程，并提供实时地技术英语支持。由于客户在欧美国家，公司会定期派遣员工到海外培训与工作，或邀请海外客户到公司进行现场培训和指导。快速发展的博朗同时也给诸多优秀员工提供了快速职业发展机会，使之成长为技术骨干及管理者。随着公司业务持续迅速增长，博朗真诚地欢迎您的加入！