1个职位: 招聘信息 网络工程师(设计)

工作内容

1. Run security monitoring, alert triage, and severity classification (P0–P3) on our SIEM (Alibaba Cloud Threat Analysis / Agentic SOC + SLS)2. Write and tune detection rules to improve coverage of key threats (credential stuffing / account takeover, promo & bonus abuse, secret leakage, privilege misuse, ransomware) and reduce false positives3. Lead incident response: detect → contain → eradicate → post-mortem, with written reports4. Build SOAR automation playbooks in Go (auto-block, isolate, credential handling) to automate repetitive response5. Aggregate security logs from all platforms (Alibaba Cloud primary + AWS + Tencent + Cloudflare) into the SIEM for unified analysis, and operate each platform's native security features (Cloud Security Center / GuardDuty / WAF, etc.)6. Take part in the on-call rotation to ensure timely alert response