Security Operations Engineer, OKX

• 5+ years minimum of Information Security experience in the Financial industry / Tech company / Solution Service provider / SOC environment
• Familiar with EDR solution / SIEM integration / IDS system / Cloud / Sandbox / Log Analysis / PCAP Analysis, etc
• Familiar with mainstream security products/tools such as: Nessus, AWVS, Appscan, Burp, webInspect, kali, Wireshark etc
• Familiar with DLP solutions such as Proofpoint, Forcepoint, Fortinet, Imperva, Digital Guardian, etc
• Able to lead and complete malicious event analysis, remediation steps and complete the followup process with responsible engineers
• Hands on knowledge of static analysis of suspicious programs , performing behavioral analysis of malicious executables, performing dynamic code analysis of malicious, unpacking malicious software, analyzing Malicious Documents and Scripts
• Experience in cybersecurity operations to include Vulnerability Management, Incident Response, Incident Management
• Fluency in Mandarin (required) and English

Desirable

• As a Security Operations Engineer, you will put in your utmost efforts to secure the OKX platform with millions of daily active users
• You will work cross-functionally with design, product, and other engineering teams to identify and assess security risks, design and develop advanced security protective mechanisms and products or deliver high-quality thorough security operations and reinforcements
• This is an opportunity to learn the full security life cycle of crypto and Web3 platforms and work along with a top-class security team fighting against worldwide security threats
• Providing help and consulting to developers on secure coding practices
• Conducting security testing and vulnerability assessments, including penetration testing, vulnerability scanning, and code reviews
• Conducting routine checks and tests to ensure that all known vulnerabilities are detected and patched
• Performing and supporting cyber incident response operations
• Conduct security alert monitoring in IDS / EDR / SIEM / Cloud environment
• Supporting DLP implementation and response
• Conducting incident response and malware handling
• Complete malware and event analysis
• Keep updated on knowledge of the IT security industry: including awareness of new or revised security solutions, security standards, trends / best practices, offensive techniques and tools
• Assisting in establishing infrastructure review processes on network and infrastructure operation
• Leading support for deployment and promotion of security products
• Collaborate with teams across the globe for process completion