职位概要(Job summary): 
主要负责组织IT安全基建的设计，实施和维护。包括协议的安全，系统的安全和软件的安全。
Mainly responsible for the design, implementation, and maintenance of the organization's IT security infrastructure. This includes security protocols, security systems, and security software.

工作职责(Responsibilities): 
1.	设计和实施安全系统和协议来保护组织的数据和系统。
Design and implement security systems and protocols to protect the organization's data and systems.
2.	指导安全评估和审查，识别漏洞和对应的解决方案。
Conduct security assessments and audits to identify vulnerabilities and recommend solutions.
3.	监控和分析安全日志来发现潜在威胁。
Monitor and analyze security logs to detect potential security threats.
4.	响应和调查安全事故。
Respond to and investigate security incidents.
5.	协助开发和维护安全相关的策略，标准和流程。
Assist with the development and maintenance of policies, standards, and procedures related to security.
6.	与网络，系统管理等IT基建部门一起确保信息安全策略得到实施和维护。
7.	Work with IT, network, and system administrators to ensure that security measures are implemented and maintained.
8.	跟踪最新的信息安全技术和最佳实践。
9.	Stay up-to-date with the latest security technologies and best practices.
10.	处理上级交办的其他事宜。
Deal with other assignments assigned by superior.

任职资格(Qualification) :
1.	大专以上学历，电脑或信息技术相关。　
College above, and major in computer or information technology related.
2.	3年以上相关工作经验。 
Above 3 years relative work experience. 
3.	有IT信息安全防护技术的知识和经验，如防火墙，入侵检测和日志管理系统等。
Experience with security technologies such as firewalls, intrusion detection/prevention systems, and security information and event management (SIEM) systems.
4.	对最新的IT技术如网络，服务器和云计算，虚拟化和微软的产品有较好的理解。
Have good understanding of the latest network, server, software solutions and technologies including cloud computing, virtualization, Microsoft tools, etc.
5.	有Wireshark, Nmap和 Burp Suite等安全信息工具的使用经验。
Experience with security tools such as Wireshark, Nmap, and Burp Suite.
6.	熟练使用Linux和Windows等操作系统。
Familiarity with operating systems such as Linux and Windows.
7.	良好的解决问题和沟通技巧。
Strong problem-solving and communication skills.
8.	英语能作为工作语言。
English as work language.
9.	CISSP/CISM等信息安全认证是加分项。
CISSP, CISM, or other relevant security certification is a plus.