Senior Security Operations Engineer - Global Security Risk Management

Summary

We are seeking a highly motivated security analyst to join our Global Security Operations Centre (GSOC). You will be responsible for performing security monitoring and investigation, incident response, threat research and hunting for our global infrastructure, encompassing both cloud-based and enterprise environments.

The ideal candidate will be well-versed in security methodologies and technologies, with a passion for protecting systems and data from cyber threats.

Responsibilities

• Perform security monitoring on global infrastructures, leveraging variety of analytic tools and techniques to detect incidents from security-relevant datasets.
• Detect incidents through daily monitoring and hunting efforts, work with cross-functional teams for remediation.
• Thoroughly document cybersecurity activities, thinking of ways to improving detection capabilities.
• Help maintain security appaliance rulesets, generate false/true positive statistics on exsiting rules, engage respective engineers to tune false rules.
• Assist the development of incident response plans, playbooks, and SOPs to improve the incident handling processes.

Requirements

• Minimum 3 years of work experience in cybersecurity operations or engineering field; the candidate should possess a strong background in addressing security threats within both enterprise network settings and cloud-based environments.
• Able to perform deep dive analysis in endpoints incidents, so you need have strong knowledge in Windows, Mac OS and Linux operating systems.
• Deep understanding of network/endpoints defense principles, common attack vectors; have a good understanding in MITRE ATT&CK’s tactics and techniques.
• Well versed in data analysis and be able to locate anomaly through large datasets.
• Good understanding of principles in common security vulnerabilities. Those who submit vulnerabilities with good grades on major security platforms are preferred.
• Have a certain level of programming knowledge, such as: Python, Java, R, Go etc.
• Experience with the following technologies or concepts:
• SIEM or other security/log management platforms
• EDR/XDR/CNAPP/CSPM
• Basic host-based forensics analysis
• NTA, SOAR, WAF, Cloud

About SHEIN

SHEIN is a global fashion and lifestyle e-retailer committed to making the beauty of fashion accessible to all.

At SHEIN, we are committed to delivering the best shopping experience for customers, empowering the communities where we operate and adhering to the highest standards with respect to operating responsibly around the world.

From our global offices, SHEIN serves over 150countries in over 20 languages, dedicating ourselves to delivering the best customer experiences, built by our family of SHEINers.

Founded in 2012, SHEIN has more than 11,000 employees operating from offices around the world. SHEIN Is made up of unique individuals who believe that fashion brings dignity to world, and hold true to the mission of making the beauty of fashion accessible to all. Our SHEINers are hands-on and get directly involved in causes that are close to our hearts.

To learn more about SHEIN, follow us at shein.com, instagram.com/sheinofficialand youtube.com/shein.